Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

Количество 12

Количество 12

ubuntu логотип

CVE-2026-70460

около 1 месяца назад

rsync 2.3.3 before 3.5.0 contains a path traversal vulnerability that allows a malicious sender to escape the module root by exploiting symlinks within the module file tree when using --partial-dir or --backup-dir options. Attackers with write access to place a symlink under the module root, or who can exploit a pre-existing trusted symlink, can direct file writes to locations outside the intended module root, achieving arbitrary file write relative to the module root parent.

CVSS3: 8.1
EPSS: Низкий
redhat логотип

CVE-2026-70460

около 1 месяца назад

rsync 2.3.3 before 3.5.0 contains a path traversal vulnerability that allows a malicious sender to escape the module root by exploiting symlinks within the module file tree when using --partial-dir or --backup-dir options. Attackers with write access to place a symlink under the module root, or who can exploit a pre-existing trusted symlink, can direct file writes to locations outside the intended module root, achieving arbitrary file write relative to the module root parent.

CVSS3: 8.1
EPSS: Низкий
nvd логотип

CVE-2026-70460

около 1 месяца назад

rsync 2.3.3 before 3.5.0 contains a path traversal vulnerability that allows a malicious sender to escape the module root by exploiting symlinks within the module file tree when using --partial-dir or --backup-dir options. Attackers with write access to place a symlink under the module root, or who can exploit a pre-existing trusted symlink, can direct file writes to locations outside the intended module root, achieving arbitrary file write relative to the module root parent.

CVSS3: 8.1
EPSS: Низкий
msrc логотип

CVE-2026-70460

28 дней назад

rsync 2.3.3 < 3.5.0 Path Traversal via --partial-dir/--backup-dir Symlink

CVSS3: 8.1
EPSS: Низкий
debian логотип

CVE-2026-70460

около 1 месяца назад

rsync 2.3.3 before 3.5.0contains a path traversal vulnerability that a ...

CVSS3: 8.1
EPSS: Низкий
rocky логотип

RLSA-2026:67462

5 дней назад

Important: rsync security, bug fix, and enhancement update

EPSS: Низкий
oracle-oval логотип

ELSA-2026-67462-0

5 дней назад

ELSA-2026-67462-0: rsync security, bug fix, and enhancement update (IMPORTANT)

EPSS: Низкий
rocky логотип

RLSA-2026:67463

5 дней назад

Important: rsync security, bug fix, and enhancement update

EPSS: Низкий
oracle-oval логотип

ELSA-2026-67463-0

5 дней назад

ELSA-2026-67463-0: rsync security, bug fix, and enhancement update (IMPORTANT)

EPSS: Низкий
suse-cvrf логотип

SUSE-SU-2026:3657-1

около 1 месяца назад

Security update for rsync

EPSS: Низкий
suse-cvrf логотип

SUSE-SU-2026:3634-1

около 1 месяца назад

Security update for rsync

EPSS: Низкий
suse-cvrf логотип

openSUSE-SU-2026:21650-1

25 дней назад

Security update for rsync

EPSS: Низкий

Уязвимостей на страницу

Уязвимость
CVSS
EPSS
Опубликовано
ubuntu логотип
CVE-2026-70460

rsync 2.3.3 before 3.5.0 contains a path traversal vulnerability that allows a malicious sender to escape the module root by exploiting symlinks within the module file tree when using --partial-dir or --backup-dir options. Attackers with write access to place a symlink under the module root, or who can exploit a pre-existing trusted symlink, can direct file writes to locations outside the intended module root, achieving arbitrary file write relative to the module root parent.

CVSS3: 8.1
0%
Низкий
около 1 месяца назад
redhat логотип
CVE-2026-70460

rsync 2.3.3 before 3.5.0 contains a path traversal vulnerability that allows a malicious sender to escape the module root by exploiting symlinks within the module file tree when using --partial-dir or --backup-dir options. Attackers with write access to place a symlink under the module root, or who can exploit a pre-existing trusted symlink, can direct file writes to locations outside the intended module root, achieving arbitrary file write relative to the module root parent.

CVSS3: 8.1
0%
Низкий
около 1 месяца назад
nvd логотип
CVE-2026-70460

rsync 2.3.3 before 3.5.0 contains a path traversal vulnerability that allows a malicious sender to escape the module root by exploiting symlinks within the module file tree when using --partial-dir or --backup-dir options. Attackers with write access to place a symlink under the module root, or who can exploit a pre-existing trusted symlink, can direct file writes to locations outside the intended module root, achieving arbitrary file write relative to the module root parent.

CVSS3: 8.1
0%
Низкий
около 1 месяца назад
msrc логотип
CVE-2026-70460

rsync 2.3.3 < 3.5.0 Path Traversal via --partial-dir/--backup-dir Symlink

CVSS3: 8.1
0%
Низкий
28 дней назад
debian логотип
CVE-2026-70460

rsync 2.3.3 before 3.5.0contains a path traversal vulnerability that a ...

CVSS3: 8.1
0%
Низкий
около 1 месяца назад
rocky логотип
RLSA-2026:67462

Important: rsync security, bug fix, and enhancement update

5 дней назад
oracle-oval логотип
ELSA-2026-67462-0

ELSA-2026-67462-0: rsync security, bug fix, and enhancement update (IMPORTANT)

5 дней назад
rocky логотип
RLSA-2026:67463

Important: rsync security, bug fix, and enhancement update

5 дней назад
oracle-oval логотип
ELSA-2026-67463-0

ELSA-2026-67463-0: rsync security, bug fix, and enhancement update (IMPORTANT)

5 дней назад
suse-cvrf логотип
SUSE-SU-2026:3657-1

Security update for rsync

около 1 месяца назад
suse-cvrf логотип
SUSE-SU-2026:3634-1

Security update for rsync

около 1 месяца назад
suse-cvrf логотип
openSUSE-SU-2026:21650-1

Security update for rsync

25 дней назад

Уязвимостей на страницу