566 matches found
CVE-2026-71310
creationtimestamp| type| source ---|---|--- 2026-08-05 22:35:36+00:00| published-proof-of-concept| https://github.com/rclone/rclone/security/advisories/GHSA-xhf4-832v-7xcr...
CVE-2026-71311
creationtimestamp| type| source ---|---|--- 2026-08-05 22:35:25+00:00| published-proof-of-concept| https://github.com/rclone/rclone/security/advisories/GHSA-8c48-q9wj-3w37 2026-08-06 12:31:36+00:00| seen| https://gist.github.com/alon710/d60715eb4915a2fe25854150e00d6548...
CVE-2026-71313
creationtimestamp| type| source ---|---|--- 2026-08-05 22:35:14+00:00| published-proof-of-concept| https://github.com/rclone/rclone/security/advisories/GHSA-7p4m-qxvv-g567 2026-08-06 06:31:10+00:00| seen| https://gist.github.com/alon710/49b7a81d033518d9857d9b26baae89fd...
CVE-2026-71312
creationtimestamp| type| source ---|---|--- 2026-08-05 22:01:31+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3msejoydgl52z 2026-08-05 22:35:21+00:00| published-proof-of-concept| https://github.com/rclone/rclone/security/advisories/GHSA-2m8m-jhrm-w6j2 2026-08-06...
DEBIAN-CVE-2026-71313
rclone is a command-line program to sync files and directories to and from different cloud storage providers. From v1.51.0 until v1.75.0, the local backend in backend/local/local.go relies on the configurable filename encoder to prevent remote filename data from becoming operating-system path...
CVE-2026-71313
rclone is a command-line program to sync files and directories to and from different cloud storage providers. From v1.51.0 until v1.75.0, the local backend in backend/local/local.go relies on the configurable filename encoder to prevent remote filename data from becoming operating-system path...
CVE-2026-71312
rclone is a command-line program to sync files and directories to and from different cloud storage providers. Prior to v1.75.0, rclone interpolates remote SFTP paths into PowerShell hash commands in backend/sftp/sftp.go, and quoteOrEscapeShellPath escapes only ASCII apostrophe even though...
DEBIAN-CVE-2026-71310
rclone is a command-line program to sync files and directories to and from different cloud storage providers. Prior to 1.75.0, the shared HTTP CONNECT helper in lib/proxy/http.go parses proxy CONNECT responses with http.ReadResponse over an unrestricted buffered reader, allowing a malicious or...
DEBIAN-CVE-2026-71311
rclone is a command-line program to sync files and directories to and from different cloud storage providers. Prior to 1.75.0, a valid but nondefault FTP filename encoding in backend/ftp/ftp.go can restore raw CR/LF immediately before an attacker-controlled path is interpolated into the...
CVE-2026-71311
rclone is a command-line program to sync files and directories to and from different cloud storage providers. Prior to 1.75.0, a valid but nondefault FTP filename encoding in backend/ftp/ftp.go can restore raw CR/LF immediately before an attacker-controlled path is interpolated into the...
CVE-2026-71309
rclone is a command-line program to sync files and directories to and from different cloud storage providers. From 1.40.0 until 1.75.0, rclone serve restic does not correctly reject URL paths beginning with ../ in cmd/serve/restic/restic.go WithRemote, which accepts a leading parent path and pass...
DEBIAN-CVE-2026-71312
rclone is a command-line program to sync files and directories to and from different cloud storage providers. Prior to v1.75.0, rclone interpolates remote SFTP paths into PowerShell hash commands in backend/sftp/sftp.go, and quoteOrEscapeShellPath escapes only ASCII apostrophe even though...
DEBIAN-CVE-2026-71309
rclone is a command-line program to sync files and directories to and from different cloud storage providers. From 1.40.0 until 1.75.0, rclone serve restic does not correctly reject URL paths beginning with ../ in cmd/serve/restic/restic.go WithRemote, which accepts a leading parent path and pass...
CVE-2026-71310
rclone is a command-line program to sync files and directories to and from different cloud storage providers. Prior to 1.75.0, the shared HTTP CONNECT helper in lib/proxy/http.go parses proxy CONNECT responses with http.ReadResponse over an unrestricted buffered reader, allowing a malicious or...
UBUNTU-CVE-2026-71309
rclone is a command-line program to sync files and directories to and from different cloud storage providers. From 1.40.0 until 1.75.0, rclone serve restic does not correctly reject URL paths beginning with ../ in cmd/serve/restic/restic.go WithRemote, which accepts a leading parent path and pass...
CVE-2026-71311
rclone is a command-line program to sync files and directories to and from different cloud storage providers. Prior to 1.75.0, a valid but nondefault FTP filename encoding in backend/ftp/ftp.go can restore raw CR/LF immediately before an attacker-controlled path is interpolated into the...
UBUNTU-CVE-2026-71312
rclone is a command-line program to sync files and directories to and from different cloud storage providers. Prior to v1.75.0, rclone interpolates remote SFTP paths into PowerShell hash commands in backend/sftp/sftp.go, and quoteOrEscapeShellPath escapes only ASCII apostrophe even though...
UBUNTU-CVE-2026-71313
rclone is a command-line program to sync files and directories to and from different cloud storage providers. From v1.51.0 until v1.75.0, the local backend in backend/local/local.go relies on the configurable filename encoder to prevent remote filename data from becoming operating-system path...
CVE-2026-71313
rclone is a command-line program to sync files and directories to and from different cloud storage providers. From v1.51.0 until v1.75.0, the local backend in backend/local/local.go relies on the configurable filename encoder to prevent remote filename data from becoming operating-system path...
CVE-2026-71310
rclone is a command-line program to sync files and directories to and from different cloud storage providers. Prior to 1.75.0, the shared HTTP CONNECT helper in lib/proxy/http.go parses proxy CONNECT responses with http.ReadResponse over an unrestricted buffered reader, allowing a malicious or...