| CVE-2026-119741 |
rsync < 3.5.2 Denial of Service via hash_search() Checksum Collisions
|
8.7
High
|
Nov 3, 2026 |
| CVE-2026-70452 |
rsync 3.1.0 before 3.5.0 contains an access control bypass vulnerability that allows remote attackers to circumvent…
|
9.1
Critical
|
Aug 13, 2026 |
| CVE-2026-70453 |
rsync before 3.5.0 contains an algorithmic complexity vulnerability in the hash_search() function that allows a remote…
|
8.7
High
|
Aug 13, 2026 |
| CVE-2026-70454 |
rsync 3.2.0 through 3.2.3 (openssl mode) and rsync-ssl through 3.4.4 (stunnel mode) contain a TLS certificate validation…
|
7.6
High
|
Aug 13, 2026 |
| CVE-2026-70455 |
rsync 3.4.2 before 3.5.0 contains a denial of service vulnerability that allows a remote sender to exhaust system…
|
8.7
High
|
Aug 13, 2026 |
| CVE-2026-70456 |
rsync 3.0.1 before 3.5.0 contains an out-of-bounds write vulnerability in the read_args() function that allows a…
|
8.8
High
|
Aug 13, 2026 |
| CVE-2026-70457 |
rsync 3.2.3 before 3.5.0 contains an out-of-bounds write in parse_size_arg() where the return value of snprintf() is…
|
8.3
High
|
Aug 13, 2026 |
| CVE-2026-70458 |
rsync 3.0.0 before 3.5.0 contains an out-of-bounds write vulnerability that allows attackers to corrupt memory by…
|
8.8
High
|
Aug 13, 2026 |
| CVE-2026-70459 |
rsync 3.0.0 before 3.5.0 contains a null pointer dereference vulnerability in the daemon child process that allows…
|
6.9
Medium
|
Aug 13, 2026 |
| CVE-2026-70460 |
rsync 2.3.3 before 3.5.0 contains a path traversal vulnerability that allows a malicious sender to escape the module…
|
9.2
Critical
|
Aug 13, 2026 |
| CVE-2026-70461 |
rsync 3.2.5 before 3.5.0 contains a heap out-of-bounds write vulnerability that allows remote unauthenticated…
|
8.8
High
|
Aug 13, 2026 |
| CVE-2026-70462 |
rsync 3.1.0 before 3.5.0 contains a signed integer overflow vulnerability in the I/O timeout implementation that…
|
7.1
High
|
Aug 13, 2026 |
| CVE-2026-70463 |
rsync 3.1.0 before 3.5.0 contains an authorization bypass in auth users directive parsing
|
8.6
High
|
Aug 13, 2026 |
| CVE-2026-70464 |
rsync daemon 2.0.0 before 3.5.0 contains a denial of service vulnerability that allows unauthenticated remote…
|
8.7
High
|
Aug 13, 2026 |
| CVE-2026-53801 |
rsync before 3.5.0 contains a symlink race condition vulnerability in the sender's directory scanning logic that…
|
8.2
High
|
Aug 13, 2026 |
| CVE-2026-53800 |
rsync before 3.5.0 contains a symlink race condition vulnerability in the --remove-source-files feature that allows…
|
5.7
Medium
|
Aug 13, 2026 |
| CVE-2026-53799 |
rsync before 3.5.0 contains a symlink race condition vulnerability that allows local attackers to cause rsync to apply…
|
7.2
High
|
Aug 13, 2026 |
| CVE-2026-53797 |
rsync before 3.5.0 contains a symlink race condition vulnerability in the sender's source tree traversal that allows…
|
5.7
Medium
|
Aug 13, 2026 |
| CVE-2026-53796 |
rsync before 3.5.0 contains a time-of-check to time-of-use (TOCTOU) race condition vulnerability in the non-daemon…
|
5.8
Medium
|
Aug 13, 2026 |
| CVE-2026-53795 |
rsync before 3.5.0 contains an arbitrary file write vulnerability that allows attackers to write files outside the…
|
7.2
High
|
Aug 13, 2026 |
| CVE-2026-53794 |
rsync before 3.5.0 contains a logic error in --max-alloc handling that allows a sender or configuration setting…
|
6.9
Medium
|
Aug 13, 2026 |
| CVE-2026-53793 |
rsync before 3.5.0 contains a path confinement bypass vulnerability that allows remote clients to escape the intended…
|
9.1
Critical
|
Aug 13, 2026 |
| CVE-2026-53792 |
rsync before 3.5.0 contains an out-of-bounds read vulnerability in the sender-side block matching logic that allows a…
|
7.1
High
|
Aug 13, 2026 |
| CVE-2026-53791 |
rsync daemon before 3.5.0 contains an IP address spoofing vulnerability that allows unauthenticated remote attackers…
|
9.1
Critical
|
Aug 13, 2026 |
| CVE-2026-53790 |
rsync before 3.5.0 contains multiple command and argument injection vulnerabilities that allow attackers to execute…
|
9.2
Critical
|
Aug 13, 2026 |