Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

2 records

Release: WebPros ConfigServer Security & Firewall 16.30 Clear all filters
TI-2026-46788 CVE-2026-65639 · GHSA-hxr2-4c3f-5rpg

OS command injection in WebPros ConfigServer Security & Firewall

Priority MEDIUM 46

OS command injection in the advanced-rule parser of ConfigServer Security & Firewall allows a remote attacker who controls a configured allow/deny feed to execute arbitrary commands as root, due to insufficient validatio…

CVSS 4.0CRITICAL 9.5 Network No auth No interaction EPSS 0.01419 Published 2026-09-10 Fixed in 16.30 CWE-78
TI-2026-46787 CVE-2026-65638 · GHSA-8qv3-jfg8-cjvp

OS command injection in WebPros ConfigServer Security & Firewall

Priority MEDIUM 46

Improper escaping of a request URL in ConfigServer Security & Firewall allows an unauthenticated remote attacker to execute arbitrary commands as the CSF service account via shell command injection.

CVSS 4.0CRITICAL 9.2 Network No auth No interaction EPSS 0.0233 Published 2026-09-10 Fixed in 16.30 CWE-78