Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

Количество 12

Количество 12

ubuntu логотип

CVE-2026-70454

около 1 месяца назад

rsync 3.2.0 through 3.2.3 (openssl mode) and rsync-ssl through 3.4.4 (stunnel mode) contain a TLS certificate validation vulnerability that allows on-path attackers to intercept encrypted sessions by presenting self-signed or otherwise invalid certificates. Attackers can exploit the failure to validate server TLS certificates against a trusted CA or verify certificate hostname matching to decrypt or tamper with rsync session content without detection by the client.

CVSS3: 8
EPSS: Низкий
redhat логотип

CVE-2026-70454

около 1 месяца назад

rsync 3.2.0 through 3.2.3 (openssl mode) and rsync-ssl through 3.4.4 (stunnel mode) contain a TLS certificate validation vulnerability that allows on-path attackers to intercept encrypted sessions by presenting self-signed or otherwise invalid certificates. Attackers can exploit the failure to validate server TLS certificates against a trusted CA or verify certificate hostname matching to decrypt or tamper with rsync session content without detection by the client.

CVSS3: 6.8
EPSS: Низкий
nvd логотип

CVE-2026-70454

около 1 месяца назад

rsync 3.2.0 through 3.2.3 (openssl mode) and rsync-ssl through 3.4.4 (stunnel mode) contain a TLS certificate validation vulnerability that allows on-path attackers to intercept encrypted sessions by presenting self-signed or otherwise invalid certificates. Attackers can exploit the failure to validate server TLS certificates against a trusted CA or verify certificate hostname matching to decrypt or tamper with rsync session content without detection by the client.

CVSS3: 8
EPSS: Низкий
msrc логотип

CVE-2026-70454

28 дней назад

rsync < 3.5.0 TLS Certificate Validation Bypass via SSL/OpenSSL Mode

EPSS: Низкий
debian логотип

CVE-2026-70454

около 1 месяца назад

rsync 3.2.0 through 3.2.3 (openssl mode) and rsync-ssl through 3.4.4 ( ...

CVSS3: 8
EPSS: Низкий
rocky логотип

RLSA-2026:67462

5 дней назад

Important: rsync security, bug fix, and enhancement update

EPSS: Низкий
oracle-oval логотип

ELSA-2026-67462-0

5 дней назад

ELSA-2026-67462-0: rsync security, bug fix, and enhancement update (IMPORTANT)

EPSS: Низкий
rocky логотип

RLSA-2026:67463

5 дней назад

Important: rsync security, bug fix, and enhancement update

EPSS: Низкий
oracle-oval логотип

ELSA-2026-67463-0

5 дней назад

ELSA-2026-67463-0: rsync security, bug fix, and enhancement update (IMPORTANT)

EPSS: Низкий
suse-cvrf логотип

SUSE-SU-2026:3657-1

около 1 месяца назад

Security update for rsync

EPSS: Низкий
suse-cvrf логотип

SUSE-SU-2026:3634-1

около 1 месяца назад

Security update for rsync

EPSS: Низкий
suse-cvrf логотип

openSUSE-SU-2026:21650-1

25 дней назад

Security update for rsync

EPSS: Низкий

Уязвимостей на страницу

Уязвимость
CVSS
EPSS
Опубликовано
ubuntu логотип
CVE-2026-70454

rsync 3.2.0 through 3.2.3 (openssl mode) and rsync-ssl through 3.4.4 (stunnel mode) contain a TLS certificate validation vulnerability that allows on-path attackers to intercept encrypted sessions by presenting self-signed or otherwise invalid certificates. Attackers can exploit the failure to validate server TLS certificates against a trusted CA or verify certificate hostname matching to decrypt or tamper with rsync session content without detection by the client.

CVSS3: 8
0%
Низкий
около 1 месяца назад
redhat логотип
CVE-2026-70454

rsync 3.2.0 through 3.2.3 (openssl mode) and rsync-ssl through 3.4.4 (stunnel mode) contain a TLS certificate validation vulnerability that allows on-path attackers to intercept encrypted sessions by presenting self-signed or otherwise invalid certificates. Attackers can exploit the failure to validate server TLS certificates against a trusted CA or verify certificate hostname matching to decrypt or tamper with rsync session content without detection by the client.

CVSS3: 6.8
0%
Низкий
около 1 месяца назад
nvd логотип
CVE-2026-70454

rsync 3.2.0 through 3.2.3 (openssl mode) and rsync-ssl through 3.4.4 (stunnel mode) contain a TLS certificate validation vulnerability that allows on-path attackers to intercept encrypted sessions by presenting self-signed or otherwise invalid certificates. Attackers can exploit the failure to validate server TLS certificates against a trusted CA or verify certificate hostname matching to decrypt or tamper with rsync session content without detection by the client.

CVSS3: 8
0%
Низкий
около 1 месяца назад
msrc логотип
CVE-2026-70454

rsync < 3.5.0 TLS Certificate Validation Bypass via SSL/OpenSSL Mode

0%
Низкий
28 дней назад
debian логотип
CVE-2026-70454

rsync 3.2.0 through 3.2.3 (openssl mode) and rsync-ssl through 3.4.4 ( ...

CVSS3: 8
0%
Низкий
около 1 месяца назад
rocky логотип
RLSA-2026:67462

Important: rsync security, bug fix, and enhancement update

5 дней назад
oracle-oval логотип
ELSA-2026-67462-0

ELSA-2026-67462-0: rsync security, bug fix, and enhancement update (IMPORTANT)

5 дней назад
rocky логотип
RLSA-2026:67463

Important: rsync security, bug fix, and enhancement update

5 дней назад
oracle-oval логотип
ELSA-2026-67463-0

ELSA-2026-67463-0: rsync security, bug fix, and enhancement update (IMPORTANT)

5 дней назад
suse-cvrf логотип
SUSE-SU-2026:3657-1

Security update for rsync

около 1 месяца назад
suse-cvrf логотип
SUSE-SU-2026:3634-1

Security update for rsync

около 1 месяца назад
suse-cvrf логотип
openSUSE-SU-2026:21650-1

Security update for rsync

25 дней назад

Уязвимостей на страницу