RS
Product
rsync
by RsyncProject · last CVE Aug 13, 2026
39
CVEs
0
On KEV
9.1
Max CVSS
0
New 30D
Severity mix
Critical 1High 22Medium 15Low 1
Watch

Add rsync to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2026-70462
6.5
0%
Aug 13
rsync 3.1.0 < 3.5.0 Signed Integer Overflow via MSG_IO_TIMEOUT
Affected: 3.1.0 through 3.4.4
CVE-2026-53792
6.5
0%
Aug 13
rsync < 3.5.0 Out-of-Bounds Read via Zero-Length Checksum Block
Affected: through 3.4.4
CVE-2026-53788
6.5
0%
Aug 13
rsync < 3.5.0 Newline Injection via name-converter uid/gid mapping
Affected: through 3.4.4
CVE-2026-53786
6.5
0%
Aug 13
rsync < 3.5.0 Filter Rule Bypass via --filter Merge Directive
Affected: through 3.4.4
CVE-2026-53799
6.3
0%
Aug 13
rsync < 3.5.0 Symlink Race Condition via ACL/xattr Application
Affected: through 3.4.4
CVE-2026-53796
6.3
0%
Aug 13
rsync < 3.5.0 TOCTOU Race Condition via Destination Directory Handling
Affected: through 3.4.4
CVE-2026-43619
6.3
0%
May 20
Rsync < 3.4.3 Symlink Race Condition via Path-Based Syscalls
Affected: before 3.4.3
CVE-2026-53801
5.9
0%
Aug 13
rsync < 3.5.0 Symlink Race Condition Directory Traversal
Affected: through 3.4.4
CVE-2026-43620
5.5
0%
May 20
Rsync < 3.4.3 Out-of-Bounds Array Read via recv_files()
Affected: before 3.4.3
CVE-2026-70459
5.3
1%
Aug 13
rsync 3.0.0 < 3.5.0 Daemon Crash via Malformed File List Entry
Affected: 3.0.0 through 3.4.4
CVE-2026-53794
5.3
1%
Aug 13
rsync < 3.5.0 Denial of Service via --max-alloc=0 Logic Error
Affected: through 3.4.4
CVE-2026-53798
5.3
0%
Aug 13
rsync < 3.5.0 Privilege Confusion via name-converter uid/gid mapping
Affected: through 3.4.4
CVE-2026-43617
4.8
0%
May 20
Rsync < 3.4.3 Authorization Bypass via Hostname Resolution
Affected: before 3.4.3
CVE-2026-53800
4.7
0%
Aug 13
rsync < 3.5.0 Symlink Race Condition via --remove-source-files
Affected: through 3.4.4
CVE-2026-53797
4.7
0%
Aug 13
rsync < 3.5.0 Symlink Race Condition Information Disclosure
Affected: through 3.4.4
Showing 15