CVE-2026-70555

Name of the Vulnerable Software and Affected Versions rConfig Core versions 8.2.3 through 8.2.12

Description Authenticated users can retrieve cleartext SSH, Telnet, and enable passwords for managed devices. This occurs because the system performs automatic decryption on read and lacks proper authorization checks. An attacker can exfiltrate all stored plaintext device credentials by sending requests to the following API endpoints: '/api/device-credentials', '/api/device-credentials/{id}', and '/api/v1/device-credentials'. The system incorrectly authenticates any valid token as the seeded administrator account.

Recommendations Update rConfig Core to version 8.2.13 or later. Restrict access to the '/api/device-credentials', '/api/device-credentials/{id}', and '/api/v1/device-credentials' endpoints to minimize the risk of exploitation.