CVE-2022-44384: rConfig

High severity, CVSS 8.8. EPSS: 5.4% chance of exploitation in the next 30 days.

An arbitrary file upload vulnerability in rconfig v3.9.6 allows attackers to execute arbitrary code via a crafted PHP file.

Affected products

• rConfig rConfig: version 3.9.6 only

Published 2022-11-17. Last modified 2026-06-17.