CVE-2021-29006: rConfig

Medium severity, CVSS 6.5. EPSS: 5.6% chance of exploitation in the next 30 days.

rConfig 3.9.6 is affected by a Local File Disclosure vulnerability. An authenticated user may successfully download any file on the server.

Affected products

• rConfig rConfig: version 3.9.6 only

Published 2021-10-11. Last modified 2026-07-09.