Where
-Infinity
0

Trending

Last week
Last month
Last year

rsync rsyncRsync < 3.4.3 TOCTOU Race Condition Allows Symlink-Based Arbitrary File Write

Risk 71
Severity
7.3
Trending
Week
First published (updated )
CVE-2026-29518

rsync rsyncRsync < 3.4.3 Authorization Bypass via Hostname Resolution

Risk 38
Severity
6.3
Trending
Week
First published (updated )
CVE-2026-43617

rsync rsyncRsync < 3.4.3 Integer Overflow Information Disclosure

Risk 64
Severity
6.1
Trending
Week
First published (updated )
CVE-2026-43618

rsync rsyncRsync < 3.4.3 Symlink Race Condition via Path-Based Syscalls

Risk 52
Severity
7.2
Trending
Week
First published (updated )
CVE-2026-43619

rsync rsyncRsync < 3.4.3 Out-of-Bounds Array Read via recv_files()

Risk 44
Severity
6.9
Trending
Week
First published (updated )
CVE-2026-43620
Free Weekly Intel

Don't miss critical vulnerabilities

Join thousands of security professionals who receive our weekly digest of trending CVEs, zero-days, and exploited vulnerabilities.

No spam. Unsubscribe anytime.

rsync rsyncRsync < 3.4.3 Off-by-One Stack Write via HTTP Proxy

Risk 21
Severity
2.1
Trending
Week
First published (updated )
CVE-2026-45232

rsync rsyncUse After Free

Risk 73
Severity
7.8
First published (updated )
CVE-2026-41035

redhat Enterprise LinuxRsync: --safe-links option bypass leads to path traversal

Risk 65
Severity
7.5
Exploited
First published (updated )
CVE-2024-12088

AlmaLinux AlmalinuxRsync: path traversal vulnerability in rsync

Risk 65
Severity
7.5
Exploited
First published (updated )
CVE-2024-12087

redhat Enterprise LinuxRsync: rsync server leaks arbitrary client files

Risk 65
Severity
6.8
Exploited
First published (updated )
CVE-2024-12086
Free Weekly Intel

Don't miss critical vulnerabilities

Join thousands of security professionals who receive our weekly digest of trending CVEs, zero-days, and exploited vulnerabilities.

No spam. Unsubscribe anytime.

redhat Enterprise Linux Server For Power Little Endian Update Services For Sap SolutionsRsync: info leak via uninitialized stack contents

Risk 65
Severity
7.5
Exploited
First published (updated )
CVE-2024-12085

Samba rsyncrsync security updates

Risk 99
Severity
9.8
Exploited
First published (updated )
CVE-2024-12084

redhat/rsyncInput Validation, Path Traversal

Risk 45
Severity
7.5
First published (updated )
CVE-2022-29154

Debian Debian LinuxLast updated 25 August 2025

Risk 45
Severity
7.5
First published (updated )
CVE-2018-5764

Debian Debian LinuxThe recv_files function in receiver.c in the daemon in rsync 3.1.2, and 3.1.3-development before 201…

Risk 22
Severity
4.3
First published (updated )
CVE-2017-17433
Free Weekly Intel

Don't miss critical vulnerabilities

Join thousands of security professionals who receive our weekly digest of trending CVEs, zero-days, and exploited vulnerabilities.

No spam. Unsubscribe anytime.

debian/rsyncThe daemon in rsync 3.1.2, and 3.1.3-development before 2017-12-03, does not check for fnamecmp file…

Risk 86
Severity
9.8
First published (updated )
CVE-2017-17434

Canonical Ubuntu LinuxLast updated 25 August 2025

Risk 88
Severity
9.8
First published (updated )
CVE-2017-16548

openSUSE openSUSErsync 3.1.1 allows remote attackers to write to arbitrary files via a symlink attack on a file in th…

Risk 40
Severity
6.4
First published (updated )
CVE-2014-9512

samba rsyncInput Validation

Risk 44
Severity
7.8
First published (updated )
CVE-2014-2855

redhat Linuxrsync, when running in daemon mode, does not properly call setgroups before dropping privileges, whi…

Risk 13
Severity
2.1
First published (updated )
CVE-2002-0080
Free Weekly Intel

Don't miss critical vulnerabilities

Join thousands of security professionals who receive our weekly digest of trending CVEs, zero-days, and exploited vulnerabilities.

No spam. Unsubscribe anytime.

Company

Resources

Contact

SecAlerts Pty Ltd.
132 Wickham Terrace
Fortitude Valley,
QLD 4006, Australia
info@secalerts.co
By using SecAlerts services, you agree to our services end-user license agreement. This website is safeguarded by reCAPTCHA and governed by the Google Privacy Policy and Terms of Service. All names, logos, and brands of products are owned by their respective owners, and any usage of these names, logos, and brands for identification purposes only does not imply endorsement. If you possess any content that requires removal, please get in touch with us.
© 2026 SecAlerts Pty Ltd.
ABN: 70 645 966 203, ACN: 645 966 203