Количество 7
Количество 7
CVE-2026-53802
rsync before 3.5.0 contains an arbitrary file read vulnerability that allows attackers to read files accessible to the rsync daemon process by exploiting symlink following in input configuration file handling including --files-from, --password-file, and filter merge files. Attackers can place a symlink at a predictable --files-from or --password-file path, or supply a --files-from path that escapes the daemon module root, to read arbitrary files accessible to the rsync process.
CVE-2026-53802
rsync before 3.5.0 contains an arbitrary file read vulnerability that allows attackers to read files accessible to the rsync daemon process by exploiting symlink following in input configuration file handling including --files-from, --password-file, and filter merge files. Attackers can place a symlink at a predictable --files-from or --password-file path, or supply a --files-from path that escapes the daemon module root, to read arbitrary files accessible to the rsync process.
CVE-2026-53802
rsync < 3.5.0 Arbitrary File Read via Symlink Following
CVE-2026-53802
rsync before 3.5.0 contains an arbitrary file read vulnerability that ...
SUSE-SU-2026:3657-1
Security update for rsync
SUSE-SU-2026:3634-1
Security update for rsync
openSUSE-SU-2026:21650-1
Security update for rsync
Уязвимостей на страницу
Уязвимость | CVSS | EPSS | Опубликовано | |
|---|---|---|---|---|
 | CVE-2026-53802 rsync before 3.5.0 contains an arbitrary file read vulnerability that allows attackers to read files accessible to the rsync daemon process by exploiting symlink following in input configuration file handling including --files-from, --password-file, and filter merge files. Attackers can place a symlink at a predictable --files-from or --password-file path, or supply a --files-from path that escapes the daemon module root, to read arbitrary files accessible to the rsync process. | CVSS3: 7.1 | 0% Низкий | 24 дня назад |
 | CVE-2026-53802 rsync before 3.5.0 contains an arbitrary file read vulnerability that allows attackers to read files accessible to the rsync daemon process by exploiting symlink following in input configuration file handling including --files-from, --password-file, and filter merge files. Attackers can place a symlink at a predictable --files-from or --password-file path, or supply a --files-from path that escapes the daemon module root, to read arbitrary files accessible to the rsync process. | CVSS3: 7.1 | 0% Низкий | 24 дня назад |
 | CVE-2026-53802 rsync < 3.5.0 Arbitrary File Read via Symlink Following | 0% Низкий | 14 дней назад | |
| CVE-2026-53802 rsync before 3.5.0 contains an arbitrary file read vulnerability that ... | CVSS3: 7.1 | 0% Низкий | 24 дня назад |
 | SUSE-SU-2026:3657-1 Security update for rsync | 17 дней назад | ||
| SUSE-SU-2026:3634-1 Security update for rsync | 19 дней назад | ||
| openSUSE-SU-2026:21650-1 Security update for rsync | 11 дней назад |
Уязвимостей на страницу