CVE-2020-10221CISA KEVEPSS p99.5%

CVE-2020-10221rConfig OS Command Injection Vulnerability

rConfig / rConfig

Description

rConfig lib/ajaxHandlers/ajaxAddTemplate.php contains an OS command injection vulnerability that allows remote attackers to execute OS commands via shell metacharacters in the fileName POST parameter.

Scoring

EPSS77.12% probability of exploitation · percentile 99.5% · 2026-10-04T12:00:21Z

CISA KEV entry

Added to KEV: 2021-11-03

(incoming)1

TypeTargetConfidenceTier
KEVEntryrConfig OS Command Injection Vulnerabilitykev-cve-2020-102210%live

Related by meaning· 6

Nearest entities by semantic similarity across the cs-graph corpus.

CVE
CVE-2025-24861
CVE
CVE-2025-59171
CVE
CVE-2026-20742
CVE
CVE-2025-62630
CVE
CVE-2026-25721
CVE
CVE-2026-21628
Sourced from NVD + CISA KEV + FIRST.org EPSS. Curated for EU compliance use cases by Adam Lundqvist, Founder at SQUR.