RS
Product
rsync
by RsyncProject · last CVE Aug 13, 2026
39
CVEs
0
On KEV
9.1
Max CVSS
0
New 30D
Severity mix
Critical 1High 22Medium 15Low 1
Watch

Add rsync to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2026-70456
8.2
0%
Aug 13
rsync 3.0.1 < 3.5.0 Heap Out-of-Bounds Write via read_args()
Affected: 3.0.1 through 3.4.4
CVE-2026-70457
8.2
0%
Aug 13
rsync 3.2.3 < 3.5.0 Out-of-Bounds Write via parse_size_arg()
Affected: 3.2.3 through 3.4.4
CVE-2026-70458
8.2
0%
Aug 13
rsync 3.0.0 < 3.5.0 Out-of-Bounds Write via FLAG_HLINKED Handling
Affected: 3.0.0 through 3.4.4
CVE-2026-70461
8.2
1%
Aug 13
rsync 3.2.5 < 3.5.0 Heap Out-of-Bounds Write via files-from Entry
Affected: 3.2.5 through 3.4.4
CVE-2026-70460
8.1
0%
Aug 13
rsync 2.3.3 < 3.5.0 Path Traversal via --partial-dir/--backup-dir Symlink
Affected: 2.3.3 through 3.4.4
CVE-2026-70463
8.1
0%
Aug 13
rsync 3.1.0 < 3.5.0 Authorization Bypass via auth users Directive Parsing
Affected: 3.1.0 through 3.4.4
CVE-2026-53795
8.1
0%
Aug 13
rsync < 3.5.0 Arbitrary File Write via --temp-dir/--link-dest
Affected: through 3.4.4
CVE-2026-53790
8.1
1%
Aug 13
rsync < 3.5.0 Command Injection via Multiple Code Paths
Affected: through 3.4.4
CVE-2026-53789
8.1
0%
Aug 13
rsync < 3.5.0 Arbitrary File Deletion via Malicious File List
Affected: through 3.4.4
CVE-2026-53783
8.1
0%
Aug 13
rsync < 3.5.0 TOCTOU Race Condition Directory Escape via rrsync
Affected: through 3.4.4
CVE-2026-43618
8.1
1%
May 20
Rsync < 3.4.3 Integer Overflow Information Disclosure
Affected: before 3.4.3
CVE-2026-70454
8.0
0%
Aug 13
rsync < 3.5.0 TLS Certificate Validation Bypass via SSL/OpenSSL Mode
Affected: through 3.4.4
CVE-2026-53803
7.8
0%
Aug 13
rsync < 3.5.0 Symlink Following Arbitrary File Overwrite
Affected: through 3.4.4
CVE-2026-70453
7.5
1%
Aug 13
rsync < 3.5.0 Algorithmic Complexity DoS via hash_search()
Affected: through 3.4.4
CVE-2026-70455
7.5
1%
Aug 13
rsync 3.4.2 < 3.5.0 DoS via --zt Zstandard Compression Thread Exhaustion
Affected: 3.4.2 through 3.4.4
CVE-2026-70464
7.5
1%
Aug 13
rsync 2.0.0 < 3.5.0 Connection Slot Exhaustion DoS via Handshake Stall
Affected: 2.0.0 through 3.4.4
CVE-2026-70452
7.4
0%
Aug 13
rsync 3.1.0 < 3.5.0 Access Control Bypass via DNS Resolution Failure
Affected: 3.1.0 through 3.4.4
CVE-2026-53793
7.4
0%
Aug 13
rsync < 3.5.0 Path Confinement Bypass via /./ Boundary Marker in Chroot Mode
Affected: through 3.4.4
CVE-2026-53785
7.1
0%
Aug 13
rsync < 3.5.0 Path Traversal Write Escape via --relative Mode
Affected: through 3.4.4
CVE-2026-53784
7.1
0%
Aug 13
rsync < 3.5.0 Path Traversal via Symlink Module Root
Affected: through 3.4.4
CVE-2026-53802
7.1
0%
Aug 13
rsync < 3.5.0 Arbitrary File Read via Symlink Following
Affected: through 3.4.4
CVE-2026-29518
7.0
0%
May 20
Rsync < 3.4.3 TOCTOU Race Condition Allows Symlink-Based Arbitrary File Write
Affected: before 3.4.3
Showing 22