Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

Поиск уязвимостей

Количество 15

Количество 15

ubuntu логотип

CVE-2026-70454

3 месяца назад

rsync 3.2.0 through 3.2.3 (openssl mode) and rsync-ssl through 3.4.4 (stunnel mode) contain a TLS certificate validation vulnerability that allows on-path attackers to intercept encrypted sessions by presenting self-signed or otherwise invalid certificates. Attackers can exploit the failure to validate server TLS certificates against a trusted CA or verify certificate hostname matching to decrypt or tamper with rsync session content without detection by the client.

CVSS3: 8
EPSS: Низкий
redhat логотип

CVE-2026-70454

3 месяца назад

rsync 3.2.0 through 3.2.3 (openssl mode) and rsync-ssl through 3.4.4 (stunnel mode) contain a TLS certificate validation vulnerability that allows on-path attackers to intercept encrypted sessions by presenting self-signed or otherwise invalid certificates. Attackers can exploit the failure to validate server TLS certificates against a trusted CA or verify certificate hostname matching to decrypt or tamper with rsync session content without detection by the client.

CVSS3: 6.8
EPSS: Низкий
nvd логотип

CVE-2026-70454

3 месяца назад

rsync 3.2.0 through 3.2.3 (openssl mode) and rsync-ssl through 3.4.4 (stunnel mode) contain a TLS certificate validation vulnerability that allows on-path attackers to intercept encrypted sessions by presenting self-signed or otherwise invalid certificates. Attackers can exploit the failure to validate server TLS certificates against a trusted CA or verify certificate hostname matching to decrypt or tamper with rsync session content without detection by the client.

CVSS3: 8
EPSS: Низкий
msrc логотип

CVE-2026-70454

3 месяца назад

rsync < 3.5.0 TLS Certificate Validation Bypass via SSL/OpenSSL Mode

EPSS: Низкий
debian логотип

CVE-2026-70454

3 месяца назад

rsync 3.2.0 through 3.2.3 (openssl mode) and rsync-ssl through 3.4.4 ( ...

CVSS3: 8
EPSS: Низкий
redos логотип

ROS-20261005-80-0011

около 1 месяца назад

Уязвимость rsync

CVSS3: 7.4
EPSS: Низкий
redos логотип

ROS-20261005-73-0011

около 1 месяца назад

Уязвимость rsync

CVSS3: 7.4
EPSS: Низкий
rocky логотип

RLSA-2026:67462

около 2 месяцев назад

Important: rsync security, bug fix, and enhancement update

EPSS: Низкий
oracle-oval логотип

ELSA-2026-67462-0

около 2 месяцев назад

ELSA-2026-67462-0: rsync security, bug fix, and enhancement update (IMPORTANT)

EPSS: Низкий
rocky логотип

RLSA-2026:67463

около 2 месяцев назад

Important: rsync security, bug fix, and enhancement update

EPSS: Низкий
oracle-oval логотип

ELSA-2026-67463-0

около 2 месяцев назад

ELSA-2026-67463-0: rsync security, bug fix, and enhancement update (IMPORTANT)

EPSS: Низкий
suse-cvrf логотип

SUSE-SU-2026:3657-1

3 месяца назад

Security update for rsync

EPSS: Низкий
suse-cvrf логотип

SUSE-SU-2026:3634-1

3 месяца назад

Security update for rsync

EPSS: Низкий
suse-cvrf логотип

openSUSE-SU-2026:21650-1

2 месяца назад

Security update for rsync

EPSS: Низкий
altlinux логотип

ALT-PU-2026-13247

3 месяца назад

ALT-PU-2026-13247: package `rsync` update to version 3.2.7-alt7

CVSS3: 9.1
EPSS: Низкий

Уязвимостей на страницу

Уязвимость
CVSS
EPSS
Опубликовано
ubuntu логотип
CVE-2026-70454

rsync 3.2.0 through 3.2.3 (openssl mode) and rsync-ssl through 3.4.4 (stunnel mode) contain a TLS certificate validation vulnerability that allows on-path attackers to intercept encrypted sessions by presenting self-signed or otherwise invalid certificates. Attackers can exploit the failure to validate server TLS certificates against a trusted CA or verify certificate hostname matching to decrypt or tamper with rsync session content without detection by the client.

CVSS3: 8
0%
Низкий
3 месяца назад
redhat логотип
CVE-2026-70454

rsync 3.2.0 through 3.2.3 (openssl mode) and rsync-ssl through 3.4.4 (stunnel mode) contain a TLS certificate validation vulnerability that allows on-path attackers to intercept encrypted sessions by presenting self-signed or otherwise invalid certificates. Attackers can exploit the failure to validate server TLS certificates against a trusted CA or verify certificate hostname matching to decrypt or tamper with rsync session content without detection by the client.

CVSS3: 6.8
0%
Низкий
3 месяца назад
nvd логотип
CVE-2026-70454

rsync 3.2.0 through 3.2.3 (openssl mode) and rsync-ssl through 3.4.4 (stunnel mode) contain a TLS certificate validation vulnerability that allows on-path attackers to intercept encrypted sessions by presenting self-signed or otherwise invalid certificates. Attackers can exploit the failure to validate server TLS certificates against a trusted CA or verify certificate hostname matching to decrypt or tamper with rsync session content without detection by the client.

CVSS3: 8
0%
Низкий
3 месяца назад
msrc логотип
CVE-2026-70454

rsync < 3.5.0 TLS Certificate Validation Bypass via SSL/OpenSSL Mode

0%
Низкий
3 месяца назад
debian логотип
CVE-2026-70454

rsync 3.2.0 through 3.2.3 (openssl mode) and rsync-ssl through 3.4.4 ( ...

CVSS3: 8
0%
Низкий
3 месяца назад
redos логотип
ROS-20261005-80-0011

Уязвимость rsync

CVSS3: 7.4
0%
Низкий
около 1 месяца назад
redos логотип
ROS-20261005-73-0011

Уязвимость rsync

CVSS3: 7.4
0%
Низкий
около 1 месяца назад
rocky логотип
RLSA-2026:67462

Important: rsync security, bug fix, and enhancement update

около 2 месяцев назад
oracle-oval логотип
ELSA-2026-67462-0

ELSA-2026-67462-0: rsync security, bug fix, and enhancement update (IMPORTANT)

около 2 месяцев назад
rocky логотип
RLSA-2026:67463

Important: rsync security, bug fix, and enhancement update

около 2 месяцев назад
oracle-oval логотип
ELSA-2026-67463-0

ELSA-2026-67463-0: rsync security, bug fix, and enhancement update (IMPORTANT)

около 2 месяцев назад
suse-cvrf логотип
SUSE-SU-2026:3657-1

Security update for rsync

3 месяца назад
suse-cvrf логотип
SUSE-SU-2026:3634-1

Security update for rsync

3 месяца назад
suse-cvrf логотип
openSUSE-SU-2026:21650-1

Security update for rsync

2 месяца назад
altlinux логотип
ALT-PU-2026-13247

ALT-PU-2026-13247: package `rsync` update to version 3.2.7-alt7

CVSS3: 9.1
3 месяца назад

Уязвимостей на страницу