CSIRTS // UNIFIED SECURITY ADVISORY FEEDSYS ● ONLINE · POWERED BY INTELFUSIONS.COM

CSIRTSSecurity advisory fusion

← All products & vendors

rsync — security advisories

36 advisorieslatest 2026-08-21⚡ RSS feed

Tracked rsync products:

⚡ Watch rsync

Get an email when a new rsync advisory drops — max one per day, one-click unsubscribe.

[NEW] [high] Rsync: Multiple vulnerabilities

highCVE-2024-12084 CVE-2026-43617 CVE-2026-43619 CVE-2026-43620cert-bund2026-08-21

[UPDATE] [high] Rsync: Multiple vulnerabilities

highCVE-2026-29518 CVE-2026-43617 CVE-2026-43618 CVE-2026-43619cert-bund2026-08-19

[UPDATE] [medium] Rsync: Vulnerability allows bypassing security measures

mediumCVE-2026-41035cert-bund2026-08-18

CVE-2026-53794: rsync < 3.5.0 Denial of Service via --max-alloc=0 Logic Error

mediumCVSS 5.3CVE-2026-53794msrc2026-08-11

CVE-2026-53795: rsync < 3.5.0 Arbitrary File Write via --temp-dir/--link-dest

highCVSS 8.1CVE-2026-53795msrc2026-08-11

CVE-2026-53796: rsync < 3.5.0 TOCTOU Race Condition via Destination Directory Handling

mediumCVSS 6.3CVE-2026-53796msrc2026-08-11

CVE-2026-53798: rsync < 3.5.0 Privilege Confusion via name-converter uid/gid mapping

mediumCVSS 5.3CVE-2026-53798msrc2026-08-11

CVE-2026-53799: rsync < 3.5.0 Symlink Race Condition via ACL/xattr Application

mediumCVSS 6.3CVE-2026-53799msrc2026-08-11

CVE-2026-53800: rsync < 3.5.0 Symlink Race Condition via --remove-source-files

mediumCVSS 4.7CVE-2026-53800msrc2026-08-11

CVE-2026-53801: rsync < 3.5.0 Symlink Race Condition Directory Traversal

mediumCVSS 5.9CVE-2026-53801msrc2026-08-11

CVE-2026-70453: rsync < 3.5.0 Algorithmic Complexity DoS via hash_search()

highCVSS 7.5CVE-2026-70453msrc2026-08-11

CVE-2026-70454: rsync < 3.5.0 TLS Certificate Validation Bypass via SSL/OpenSSL Mode

highCVSS 8CVE-2026-70454msrc2026-08-11

CVE-2026-70455: rsync 3.4.2 < 3.5.0 DoS via --zt Zstandard Compression Thread Exhaustion

highCVSS 7.5CVE-2026-70455msrc2026-08-11

CVE-2026-70456: rsync 3.0.1 < 3.5.0 Heap Out-of-Bounds Write via read_args()

highCVSS 8.2CVE-2026-70456msrc2026-08-11

CVE-2026-70458: rsync 3.0.0 < 3.5.0 Out-of-Bounds Write via FLAG_HLINKED Handling

highCVSS 8.2CVE-2026-70458msrc2026-08-11

CVE-2026-70459: rsync 3.0.0 < 3.5.0 Daemon Crash via Malformed File List Entry

mediumCVSS 5.3CVE-2026-70459msrc2026-08-11

CVE-2026-70462: rsync 3.1.0 < 3.5.0 Signed Integer Overflow via MSG_IO_TIMEOUT

mediumCVSS 6.5CVE-2026-70462msrc2026-08-11

CVE-2026-70464: rsync 2.0.0 < 3.5.0 Connection Slot Exhaustion DoS via Handshake Stall

highCVSS 7.5CVE-2026-70464msrc2026-08-11

CVE-2026-70457: rsync 3.2.3 < 3.5.0 Out-of-Bounds Write via parse_size_arg()

mediumCVSS 6.5CVE-2026-70457msrc2026-08-11

CVE-2026-53783: rsync < 3.5.0 TOCTOU Race Condition Directory Escape via rrsync

highCVSS 8.1CVE-2026-53783msrc2026-08-11

CVE-2026-53785: rsync < 3.5.0 Path Traversal Write Escape via --relative Mode

highCVSS 7.1CVE-2026-53785msrc2026-08-11

CVE-2026-53786: rsync < 3.5.0 Filter Rule Bypass via --filter Merge Directive

mediumCVSS 6.5CVE-2026-53786msrc2026-08-11

CVE-2026-53788: rsync < 3.5.0 Newline Injection via name-converter uid/gid mapping

mediumCVSS 6.5CVE-2026-53788msrc2026-08-11

CVE-2026-53789: rsync < 3.5.0 Arbitrary File Deletion via Malicious File List

mediumCVSS 6.5CVE-2026-53789msrc2026-08-11

CVE-2026-53791: rsync < 3.5.0 Daemon IP Spoofing via PROXY Protocol Header

criticalCVSS 9.1CVE-2026-53791msrc2026-08-11

CVE-2026-53792: rsync < 3.5.0 Out-of-Bounds Read via Zero-Length Checksum Block

mediumCVSS 6.5CVE-2026-53792msrc2026-08-11

CVE-2026-53793: rsync < 3.5.0 Path Confinement Bypass via /./ Boundary Marker in Chroot Mode

highCVSS 7.4CVE-2026-53793msrc2026-08-11

CVE-2026-53797: rsync < 3.5.0 Symlink Race Condition Information Disclosure

mediumCVSS 4.7CVE-2026-53797msrc2026-08-11

CVE-2026-53802: rsync < 3.5.0 Arbitrary File Read via Symlink Following

highCVSS 7.1CVE-2026-53802msrc2026-08-11

CVE-2026-53803: rsync < 3.5.0 Symlink Following Arbitrary File Overwrite

highCVSS 7.8CVE-2026-53803msrc2026-08-11

CVE-2026-70452: rsync 3.1.0 < 3.5.0 Access Control Bypass via DNS Resolution Failure

highCVSS 7.4CVE-2026-70452msrc2026-08-11

CVE-2026-70460: rsync 2.3.3 < 3.5.0 Path Traversal via --partial-dir/--backup-dir Symlink

highCVSS 8.1CVE-2026-70460msrc2026-08-11

CVE-2026-70461: rsync 3.2.5 < 3.5.0 Heap Out-of-Bounds Write via files-from Entry

highCVSS 8.2CVE-2026-70461msrc2026-08-11

CVE-2026-53784: rsync < 3.5.0 Path Traversal via Symlink Module Root

highCVSS 7.1CVE-2026-53784msrc2026-08-11

CVE-2026-53790: rsync < 3.5.0 Command Injection via Multiple Code Paths

highCVSS 8.1CVE-2026-53790msrc2026-08-11

[UPDATE] [high] Rsync: Multiple vulnerabilities

highCVE-2024-12084 CVE-2024-12085 CVE-2024-12086 CVE-2024-12087cert-bund2026-08-04