CVE-2021-29005

8.8 highEPSS 2.2%

High (8.8) in rconfig rconfig. EPSS 2.2% chance of exploitation in the next 30 days.

Insecure permission of chmod command on rConfig server 3.9.6 exists. After installing rConfig apache user may execute chmod as root without password which may let an attacker with low privilege to gain root access on server.

Severity

CVSS 3.1

8.8 high

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

EPSS: 2.2% chance of exploitation in the next 30 days; higher than 82% of CVEs (scores of 2026-10-31)
CWE: CWE-276
Published: 2021-10-11
Modified: 2026-07-09
Record from: the NVD, synced 2026-10-19

Affected

rconfig:rconfig

References

https://github.com/mrojz/rconfig-exploit/blob/main/CVE-2021-29005-POC.sh
https://github.com/mrojz/rconfig-exploit/blob/main/CVE-2021-29005-POC.sh

Check your stack JSON