rsync
- Software type
- Other
- Total vulnerabilities (90 days)
- Products & ServicesProducts & Services
- SolutionsSolutions
- PricingPricing
- CompanyCompany
- ResourcesResources
en
en
A short verification protects source data and prevents automated AI requests.
Verifying...
As of 11/08/2026, rsync recorded 34 security vulnerabilities in the last 90 days, of which 25 are rated High or Critical. None of these vulnerabilities is actively exploited (KEV) according to CISA's catalog. CyStack recommends that organizations and individual users apply patches as soon as possible.
CyStack does not yet have sufficient official-source data to identify the latest version of rsync and determine which vulnerabilities affect that version.
CyStack VulnScan continuously discovers assets, validates vulnerabilities, and helps security teams prioritize remediation across the organization.
CVE-2026-119741rsync < 3.5.2 Denial of Service via hash_search() Checksum CollisionsCVE-2026-70464rsync 2.0.0 < 3.5.0 Connection Slot Exhaustion DoS via Handshake StallCVE-2026-70463rsync 3.1.0 < 3.5.0 Authorization Bypass via auth users Directive ParsingCVE-2026-70462rsync 3.1.0 < 3.5.0 Signed Integer Overflow via MSG_IO_TIMEOUTCVE-2026-70461rsync 3.2.5 < 3.5.0 Heap Out-of-Bounds Write via files-from Entry| Vulnerability | Exploitation status | Fix | Published | Severity |
|---|---|---|---|---|
CVE-2026-119741rsync < 3.5.2 Denial of Service via hash_search() Checksum Collisions | Exploitation statusNot exploited | FixYes |
| SeverityHigh |
CVE-2026-70464rsync 2.0.0 < 3.5.0 Connection Slot Exhaustion DoS via Handshake Stall | Exploitation statusNot exploited | FixYes | Published08/13/2026 | SeverityHigh |
|---|
CVE-2026-70463rsync 3.1.0 < 3.5.0 Authorization Bypass via auth users Directive Parsing | Exploitation statusNot exploited | FixYes | Published08/13/2026 | SeverityHigh |
|---|
CVE-2026-70462rsync 3.1.0 < 3.5.0 Signed Integer Overflow via MSG_IO_TIMEOUT | Exploitation statusNot exploited | FixYes | Published08/13/2026 | SeverityHigh |
|---|
CVE-2026-70461rsync 3.2.5 < 3.5.0 Heap Out-of-Bounds Write via files-from Entry | Exploitation statusNot exploited | FixYes | Published08/13/2026 | SeverityHigh |
|---|
CVE-2026-70460rsync 2.3.3 < 3.5.0 Path Traversal via --partial-dir/--backup-dir Symlink | Exploitation statusNot exploited | FixYes | Published08/13/2026 | SeverityCritical |
|---|
CVE-2026-70459rsync 3.0.0 < 3.5.0 Daemon Crash via Malformed File List Entry | Exploitation statusNot exploited | FixYes | Published08/13/2026 | SeverityMedium |
|---|
CVE-2026-70458rsync 3.0.0 < 3.5.0 Out-of-Bounds Write via FLAG_HLINKED Handling | Exploitation statusNot exploited | FixYes | Published08/13/2026 | SeverityHigh |
|---|
CVE-2026-70457rsync 3.2.3 < 3.5.0 Out-of-Bounds Write via parse_size_arg() | Exploitation statusNot exploited | FixYes | Published08/13/2026 | SeverityHigh |
|---|
CVE-2026-70456rsync 3.0.1 < 3.5.0 Heap Out-of-Bounds Write via read_args() | Exploitation statusNot exploited | FixYes | Published08/13/2026 | SeverityHigh |
|---|
CVE-2026-70455rsync 3.4.2 < 3.5.0 DoS via --zt Zstandard Compression Thread Exhaustion | Exploitation statusNot exploited | FixYes | Published08/13/2026 | SeverityHigh |
|---|
CVE-2026-70454rsync < 3.5.0 TLS Certificate Validation Bypass via SSL/OpenSSL Mode | Exploitation statusNot exploited | FixYes | Published08/13/2026 | SeverityHigh |
|---|
CVE-2026-70453rsync < 3.5.0 Algorithmic Complexity DoS via hash_search() | Exploitation statusNot exploited | FixYes | Published08/13/2026 | SeverityHigh |
|---|
CVE-2026-70452rsync 3.1.0 < 3.5.0 Access Control Bypass via DNS Resolution Failure | Exploitation statusNot exploited | FixYes | Published08/13/2026 | SeverityCritical |
|---|
CVE-2026-53803rsync < 3.5.0 Symlink Following Arbitrary File Overwrite | Exploitation statusNot exploited | FixYes | Published08/13/2026 | SeverityHigh |
|---|
CVE-2026-53802rsync < 3.5.0 Arbitrary File Read via Symlink Following | Exploitation statusNot exploited | FixYes | Published08/13/2026 | SeverityHigh |
|---|
CVE-2026-53801rsync < 3.5.0 Symlink Race Condition Directory Traversal | Exploitation statusNot exploited | FixYes | Published08/13/2026 | SeverityHigh |
|---|
CVE-2026-53800rsync < 3.5.0 Symlink Race Condition via --remove-source-files | Exploitation statusNot exploited | FixYes | Published08/13/2026 | SeverityMedium |
|---|
CVE-2026-53799rsync < 3.5.0 Symlink Race Condition via ACL/xattr Application | Exploitation statusNot exploited | FixYes | Published08/13/2026 | SeverityHigh |
|---|
CVE-2026-53798rsync < 3.5.0 Privilege Confusion via name-converter uid/gid mapping | Exploitation statusNot exploited | FixYes | Published08/13/2026 | SeverityMedium |
|---|
CVE-2026-53797rsync < 3.5.0 Symlink Race Condition Information Disclosure | Exploitation statusNot exploited | FixYes | Published08/13/2026 | SeverityMedium |
|---|
CVE-2026-53796rsync < 3.5.0 TOCTOU Race Condition via Destination Directory Handling | Exploitation statusNot exploited | FixYes | Published08/13/2026 | SeverityMedium |
|---|
CVE-2026-53795rsync < 3.5.0 Arbitrary File Write via --temp-dir/--link-dest | Exploitation statusNot exploited | FixYes | Published08/13/2026 | SeverityHigh |
|---|
CVE-2026-53794rsync < 3.5.0 Denial of Service via --max-alloc=0 Logic Error | Exploitation statusNot exploited | FixYes | Published08/13/2026 | SeverityMedium |
|---|
CVE-2026-53793rsync < 3.5.0 Path Confinement Bypass via /./ Boundary Marker in Chroot Mode | Exploitation statusNot exploited | FixYes | Published08/13/2026 | SeverityCritical |
|---|
CVE-2026-53792rsync < 3.5.0 Out-of-Bounds Read via Zero-Length Checksum Block | Exploitation statusNot exploited | FixYes | Published08/13/2026 | SeverityHigh |
|---|
CVE-2026-53791rsync < 3.5.0 Daemon IP Spoofing via PROXY Protocol Header | Exploitation statusNot exploited | FixYes | Published08/13/2026 | SeverityCritical |
|---|
CVE-2026-53790rsync < 3.5.0 Command Injection via Multiple Code Paths | Exploitation statusNot exploited | FixYes | Published08/13/2026 | SeverityCritical |
|---|
CVE-2026-53789rsync < 3.5.0 Arbitrary File Deletion via Malicious File List | Exploitation statusNot exploited | FixYes | Published08/13/2026 | SeverityHigh |
|---|
CVE-2026-53788rsync < 3.5.0 Newline Injection via name-converter uid/gid mapping | Exploitation statusNot exploited | FixYes | Published08/13/2026 | SeverityMedium |
|---|
CVE-2026-53786rsync < 3.5.0 Filter Rule Bypass via --filter Merge Directive | Exploitation statusNot exploited | FixYes | Published08/13/2026 | SeverityMedium |
|---|
CVE-2026-53785rsync < 3.5.0 Path Traversal Write Escape via --relative Mode | Exploitation statusNot exploited | FixYes | Published08/13/2026 | SeverityMedium |
|---|
CVE-2026-53784rsync < 3.5.0 Path Traversal via Symlink Module Root | Exploitation statusNot exploited | FixYes | Published08/13/2026 | SeverityHigh |
|---|
CVE-2026-53783rsync < 3.5.0 TOCTOU Race Condition Directory Escape via rrsync | Exploitation statusNot exploited | FixYes | Published08/13/2026 | SeverityHigh |
|---|
CVE-2026-45232Rsync < 3.4.3 Off-by-One Stack Write via HTTP Proxy | Exploitation statusNot exploited | FixYes | Published05/20/2026 | SeverityLow |
|---|
CVE-2026-43620Rsync < 3.4.3 Out-of-Bounds Array Read via recv_files() | Exploitation statusNot exploited | FixYes | Published05/20/2026 | SeverityMedium |
|---|
CVE-2026-43619Rsync < 3.4.3 Symlink Race Condition via Path-Based Syscalls | Exploitation statusNot exploited | FixYes | Published05/20/2026 | SeverityHigh |
|---|
CVE-2026-43618Rsync < 3.4.3 Integer Overflow Information Disclosure | Exploitation statusNot exploited | FixYes | Published05/20/2026 | SeverityMedium |
|---|
CVE-2026-43617Rsync < 3.4.3 Authorization Bypass via Hostname Resolution | Exploitation statusNot exploited | FixYes | Published05/20/2026 | SeverityMedium |
|---|
CVE-2026-29518Rsync < 3.4.3 TOCTOU Race Condition Allows Symlink-Based Arbitrary File Write | Exploitation statusNot exploited | FixYes | Published05/20/2026 | SeverityHigh |
|---|
40 Results | Page 1 of 1