CVE-2026-77914Disclosure

LOWCVSS 7.1 · HIGH

Signal is active with 1 mentions in latest observed window

Immediate actions

Track advisory updates for patch or workaround availability

Recommended action window: Monitor and triage in normal cycle

NVD description

rConfig Core 8.0.0 before 8.2.13 contains a path traversal vulnerability that allows authenticated users to read arbitrary files by supplying crafted filenames containing directory traversal sequences to the export download endpoint. Attackers can manipulate the filename parameter with traversal sequences to escape the intended export directory and access files outside it that are readable by the application process.

Back to dashboard

0.0/ 10 priority

Sources & remediation

Other references

Weakness type (CWE)

CWE-22

Priority

LOW

Exploitation

NONE

PoC

NONE

Patch

NONE

Momentum

NONE

Threat summary

1 mentions across 1 observed day

What's happening

Technical details provided in 1 signal
Disclosure: 1 classified signal
1 total mentions across 1 day

Deep dive

Activity timeline1 mentions / 1d

Signal classification1 categories

Disclosure

1100.0%

Referenced assets1 URL

By indicator

https://qwesired.com/blog/cve-2026-77914/

Full discourse1 post

Adam N.@Qwesi_RED46d
Disclosure
🔐 CVE-2026-77914 | CVSS 7.1 High Found and responsibly disclosed a path traversal vulnerability in rConfig Core allowing low-privileged users to read sensitive files and potentially expose application secrets. https://qwesired.com/blog/cve-2026-77914/ #CyberSecurity #CVE #AppSec
Post summary
Responsible disclosure of CVE‑2026‑77914, a high‑severity path traversal vulnerability in rConfig Core that lets low‑privileged users read sensitive files.
00000100
198 followersView on X

Explore more

Back to dashboard