Vulnerabilities

TI-2026-80310 CVE-2026-116254 · GHSA-2869-hc7g-hw5v

Origin validation error in rathena FluxCP PayPal IPN handler

HIGH 70

A vulnerability was identified in rathena FluxCP up to 98cd4b8fd83228c11b36fb3d097b8e0f7c105a8d.

CVSS 4.0MEDIUM 6.9 Network No auth No interaction EPSS 0.00261 Published 2026-10-26 No fix listed CWE-345

TI-2025-38980 CVE-2025-62797

HIGH 72

FluxCP is a web-based Control Panel for rAthena servers written in PHP.

CVSS 4.0HIGH 8.6 Network No auth User interaction EPSS 0.00243 Published 2025-10-29 No fix listed CWE-352

TI-2025-38488 CVE-2025-62170

LOW 33

rAthena is an open-source cross-platform MMORPG server.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00371 Published 2025-10-13 No fix listed CWE-416

TI-2025-36408 CVE-2025-58750

MEDIUM 45

rAthena is an open-source cross-platform massively multiplayer online role playing game (MMORPG) server.

CVSS 3.1CRITICAL 9.1 Network No auth No interaction EPSS 0.003 Published 2025-09-09 Fixed in 0cc348b CWE-119

TI-2025-36206 CVE-2025-58448

MEDIUM 49

rAthena is an open-source cross-platform massively multiplayer online role playing game (MMORPG) server.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00358 Published 2025-09-09 Fixed in 0d89ae0 CWE-89

TI-2025-36205 CVE-2025-58447

MEDIUM 50

rAthena is an open-source cross-platform massively multiplayer online role playing game (MMORPG) server.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00878 Published 2025-09-09 Fixed in 2f5248b CWE-122

TI-2024-30766 CVE-2024-45799

LOW 34

FluxCP is a web-based Control Panel for rAthena servers written in PHP.

CVSS 3.1HIGH 7.3 Network No auth No interaction EPSS 0.00283 Published 2024-09-16 Fixed in 1.3 CWE-200

TI-2022-04042 CVE-2022-4421 · GHSA-6mv6-789j-fmx4

LOW 28

A vulnerability was found in rAthena FluxCP.

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.00443 Published 2022-12-12 No fix listed CWE-707