0.03 Low
EPSS
Percentile
90.9%
An insecure update feature in the /updater.php component of rConfig 3.9.6 and below allows attackers to execute arbitrary code via a crafted ZIP file.
ssd-disclosure.com/ssd-advisory-rconfig-unauthenticated-rce/