Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

Поиск уязвимостей

Количество 18

Количество 18

ubuntu логотип

CVE-2026-53803

3 месяца назад

rsync before 3.5.0 contains a symlink following vulnerability that allows local attackers to overwrite arbitrary files by placing a symlink at a predictable output path such as --log-file, --write-batch, or daemon-mode log and statistics paths. Attackers can exploit rsync's failure to reject symlinks during ancillary file writes to redirect output to arbitrary filesystem locations, achieving local privilege escalation on installations where rsync runs with elevated privileges such as setuid or privileged daemon configurations.

CVSS3: 7.8
EPSS: Низкий
redhat логотип

CVE-2026-53803

3 месяца назад

rsync before 3.5.0 contains a symlink following vulnerability that allows local attackers to overwrite arbitrary files by placing a symlink at a predictable output path such as --log-file, --write-batch, or daemon-mode log and statistics paths. Attackers can exploit rsync's failure to reject symlinks during ancillary file writes to redirect output to arbitrary filesystem locations, achieving local privilege escalation on installations where rsync runs with elevated privileges such as setuid or privileged daemon configurations.

CVSS3: 7
EPSS: Низкий
nvd логотип

CVE-2026-53803

3 месяца назад

rsync before 3.5.0 contains a symlink following vulnerability that allows local attackers to overwrite arbitrary files by placing a symlink at a predictable output path such as --log-file, --write-batch, or daemon-mode log and statistics paths. Attackers can exploit rsync's failure to reject symlinks during ancillary file writes to redirect output to arbitrary filesystem locations, achieving local privilege escalation on installations where rsync runs with elevated privileges such as setuid or privileged daemon configurations.

CVSS3: 7.8
EPSS: Низкий
msrc логотип

CVE-2026-53803

3 месяца назад

rsync < 3.5.0 Symlink Following Arbitrary File Overwrite

EPSS: Низкий
debian логотип

CVE-2026-53803

3 месяца назад

rsync before 3.5.0 contains a symlink following vulnerability that all ...

CVSS3: 7.8
EPSS: Низкий
fstec логотип

BDU:2026-14823

3 месяца назад

Уязвимость утилиты для передачи и синхронизации файлов Rsync, связанная с некорректным определением символических ссылок перед доступом к файлу, позволяющая нарушителю повысить свои привилегии

CVSS3: 7.8
EPSS: Низкий
redos логотип

ROS-20261005-80-0014

около 1 месяца назад

Уязвимость rsync

CVSS3: 7.8
EPSS: Низкий
redos логотип

ROS-20261005-73-0014

около 1 месяца назад

Уязвимость rsync

CVSS3: 7.8
EPSS: Низкий
rocky логотип

RLSA-2026:74095

около 1 месяца назад

Important: rsync security, bug fix, and enhancement update

EPSS: Низкий
oracle-oval логотип

ELSA-2026-74095

около 1 месяца назад

ELSA-2026-74095: rsync security, bug fix, and enhancement update (IMPORTANT)

EPSS: Низкий
rocky логотип

RLSA-2026:67462

около 2 месяцев назад

Important: rsync security, bug fix, and enhancement update

EPSS: Низкий
oracle-oval логотип

ELSA-2026-67462-0

около 2 месяцев назад

ELSA-2026-67462-0: rsync security, bug fix, and enhancement update (IMPORTANT)

EPSS: Низкий
rocky логотип

RLSA-2026:67463

около 2 месяцев назад

Important: rsync security, bug fix, and enhancement update

EPSS: Низкий
oracle-oval логотип

ELSA-2026-67463-0

около 2 месяцев назад

ELSA-2026-67463-0: rsync security, bug fix, and enhancement update (IMPORTANT)

EPSS: Низкий
suse-cvrf логотип

SUSE-SU-2026:3657-1

3 месяца назад

Security update for rsync

EPSS: Низкий
suse-cvrf логотип

SUSE-SU-2026:3634-1

3 месяца назад

Security update for rsync

EPSS: Низкий
suse-cvrf логотип

openSUSE-SU-2026:21650-1

2 месяца назад

Security update for rsync

EPSS: Низкий
altlinux логотип

ALT-PU-2026-13247

3 месяца назад

ALT-PU-2026-13247: package `rsync` update to version 3.2.7-alt7

CVSS3: 9.1
EPSS: Низкий

Уязвимостей на страницу

Уязвимость
CVSS
EPSS
Опубликовано
ubuntu логотип
CVE-2026-53803

rsync before 3.5.0 contains a symlink following vulnerability that allows local attackers to overwrite arbitrary files by placing a symlink at a predictable output path such as --log-file, --write-batch, or daemon-mode log and statistics paths. Attackers can exploit rsync's failure to reject symlinks during ancillary file writes to redirect output to arbitrary filesystem locations, achieving local privilege escalation on installations where rsync runs with elevated privileges such as setuid or privileged daemon configurations.

CVSS3: 7.8
0%
Низкий
3 месяца назад
redhat логотип
CVE-2026-53803

rsync before 3.5.0 contains a symlink following vulnerability that allows local attackers to overwrite arbitrary files by placing a symlink at a predictable output path such as --log-file, --write-batch, or daemon-mode log and statistics paths. Attackers can exploit rsync's failure to reject symlinks during ancillary file writes to redirect output to arbitrary filesystem locations, achieving local privilege escalation on installations where rsync runs with elevated privileges such as setuid or privileged daemon configurations.

CVSS3: 7
0%
Низкий
3 месяца назад
nvd логотип
CVE-2026-53803

rsync before 3.5.0 contains a symlink following vulnerability that allows local attackers to overwrite arbitrary files by placing a symlink at a predictable output path such as --log-file, --write-batch, or daemon-mode log and statistics paths. Attackers can exploit rsync's failure to reject symlinks during ancillary file writes to redirect output to arbitrary filesystem locations, achieving local privilege escalation on installations where rsync runs with elevated privileges such as setuid or privileged daemon configurations.

CVSS3: 7.8
0%
Низкий
3 месяца назад
msrc логотип
CVE-2026-53803

rsync < 3.5.0 Symlink Following Arbitrary File Overwrite

0%
Низкий
3 месяца назад
debian логотип
CVE-2026-53803

rsync before 3.5.0 contains a symlink following vulnerability that all ...

CVSS3: 7.8
0%
Низкий
3 месяца назад
fstec логотип
BDU:2026-14823

Уязвимость утилиты для передачи и синхронизации файлов Rsync, связанная с некорректным определением символических ссылок перед доступом к файлу, позволяющая нарушителю повысить свои привилегии

CVSS3: 7.8
0%
Низкий
3 месяца назад
redos логотип
ROS-20261005-80-0014

Уязвимость rsync

CVSS3: 7.8
0%
Низкий
около 1 месяца назад
redos логотип
ROS-20261005-73-0014

Уязвимость rsync

CVSS3: 7.8
0%
Низкий
около 1 месяца назад
rocky логотип
RLSA-2026:74095

Important: rsync security, bug fix, and enhancement update

около 1 месяца назад
oracle-oval логотип
ELSA-2026-74095

ELSA-2026-74095: rsync security, bug fix, and enhancement update (IMPORTANT)

около 1 месяца назад
rocky логотип
RLSA-2026:67462

Important: rsync security, bug fix, and enhancement update

около 2 месяцев назад
oracle-oval логотип
ELSA-2026-67462-0

ELSA-2026-67462-0: rsync security, bug fix, and enhancement update (IMPORTANT)

около 2 месяцев назад
rocky логотип
RLSA-2026:67463

Important: rsync security, bug fix, and enhancement update

около 2 месяцев назад
oracle-oval логотип
ELSA-2026-67463-0

ELSA-2026-67463-0: rsync security, bug fix, and enhancement update (IMPORTANT)

около 2 месяцев назад
suse-cvrf логотип
SUSE-SU-2026:3657-1

Security update for rsync

3 месяца назад
suse-cvrf логотип
SUSE-SU-2026:3634-1

Security update for rsync

3 месяца назад
suse-cvrf логотип
openSUSE-SU-2026:21650-1

Security update for rsync

2 месяца назад
altlinux логотип
ALT-PU-2026-13247

ALT-PU-2026-13247: package `rsync` update to version 3.2.7-alt7

CVSS3: 9.1
3 месяца назад

Уязвимостей на страницу