Linux Distros Unpatched Vulnerability : CVE-2026-53803

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - rsync before 3.5.0 contains a symlink following vulnerability that allows local attackers to overwrite arbitrary files by placing a symlink at a predictable...

Linux Distros Unpatched Vulnerability : CVE-2026-70458

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - rsync 3.0.0 before 3.5.0 contains an out-of-bounds write vulnerability that allows attackers to corrupt memory by triggering HLINKBUMP processing on file entrie...

Linux Distros Unpatched Vulnerability : CVE-2026-70452

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - rsync 3.1.0 before 3.5.0 contains an access control bypass vulnerability that allows remote attackers to circumvent hosts deny rules by inducing DNS resolution...

Linux Distros Unpatched Vulnerability : CVE-2026-53797

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - rsync before 3.5.0 contains a symlink race condition vulnerability in the sender's source tree traversal that allows an attacker who can manipulate a parent...

Linux Distros Unpatched Vulnerability : CVE-2026-53794

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - rsync before 3.5.0 contains a logic error in --max-alloc handling that allows a sender or configuration setting --max-alloc=0 to disable allocation sanity check...

PT-2026-71659

Name of the Vulnerable Software and Affected Versions rsync versions 3.0.0 through 3.4.x Description A null pointer dereference occurs in the daemon child process. A remote attacker can cause the daemon to crash by sending a file list where the first entry is a dot entry not typed as a directory...

PT-2026-71636

Name of the Vulnerable Software and Affected Versions rsync versions prior to 3.5.0 Description A privilege confusion issue exists in the name-converter subprocess uid/gid mapping. Local attackers can cause transferred files to be owned by root by influencing the name-converter responses to retur...

Linux Distros Unpatched Vulnerability : CVE-2026-53798

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - rsync before 3.5.0 contains a privilege confusion vulnerability in the name-converter subprocess uid/gid mapping that allows local attackers to cause transferre...

Linux Distros Unpatched Vulnerability : CVE-2026-70455

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - rsync 3.4.2 before 3.5.0 contains a denial of service vulnerability that allows a remote sender to exhaust system resources by specifying the --zt short alias f...

Security Bulletin: Vulnerability in Rsync affects IBM Netezza Appliance

Summary The Rsync package is used by IBM Netezza Appliance . IBM Netezza Appliance has addressed the applicable CVE CVE-2026-29518 Vulnerability Details CVEID:CVE-2026-29518 DESCRIPTION: Rsync versions before 3.4.3 contain a time-of-check to time-of-use TOCTOU race condition in daemon file handli...

mariadb: Arbitrary code execution via improper parameter validation during SST

A flaw was found in MariaDB server. During the State Snapshot Transfer SST process, a malicious joiner node could exploit improper parameter validation on the donor node. This vulnerability, specifically within the rsync SST method, allows the malicious joiner to execute arbitrary shell commands ...

CVE-2026-18188

A format string vulnerability was found in the Rsync Backup on the ADM. The vulnerability occurs because user-controlled rsync backup configuration or log data may be processed through an unsafe format string operation. An authenticated attacker can exploit this issue to disclose memory informati...

CVE-2026-18188

CVE-2026-18188 describes a format-string vulnerability in the ADM’s Rsync Backup component. Affected software ranges: ADM 4.1.0–4.3.3.RUN1 and ADM 5.0.0–5.1.3.RI81. The issue arises when user-controlled rsync backup configuration or log data are processed via unsafe format-string operations, allo...

CVE-2026-18188 A format string vulnerability was found in the Rsync Backup on the ADM

A format string vulnerability was found in the Rsync Backup on the ADM. The vulnerability occurs because user-controlled rsync backup configuration or log data may be processed through an unsafe format string operation. An authenticated attacker can exploit this issue to disclose memory informati...

CVE-2026-18188

A format string vulnerability was found in the Rsync Backup on the ADM. The vulnerability occurs because user-controlled rsync backup configuration or log data may be processed through an unsafe format string operation. An authenticated attacker can exploit this issue to disclose memory informati...

EUVD-2026-50950

A format string vulnerability was found in the Rsync Backup on the ADM. The vulnerability occurs because user-controlled rsync backup configuration or log data may be processed through an unsafe format string operation. An authenticated attacker can exploit this issue to disclose memory informati...

CVE-2026-18188 A format string vulnerability was found in the Rsync Backup on the ADM

A format string vulnerability was found in the Rsync Backup on the ADM. The vulnerability occurs because user-controlled rsync backup configuration or log data may be processed through an unsafe format string operation. An authenticated attacker can exploit this issue to disclose memory informati...

CVE-2026-16448

The CVE-2026-16448 entry applies to D-Link DNS-series devices (e.g., DNS-120, DNS-320/325/327L, DNS-1550-04, etc.) up to 20260205. The affected element is function cgi_check_rsync_rw in /cgi-bin/remote_backup.cgi. Manipulating the ip argument results in a remote command injection, enabling remote...

EUVD-2026-46265

A vulnerability was found in D-Link DNS-120, DNR-202L, DNS-315L, DNS-320, DNS-320L, DNS-320LW, DNS-321, DNR-322L, DNS-323, DNS-325, DNS-326, DNS-327L, DNR-326, DNS-340L, DNS-343, DNS-345, DNS-726-4, DNS-1100-4, DNS-1200-05 and DNS-1550-04 up to 20260205. The affected element is the function...

SUSE CVE-2026-44507

REJECT DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2026-43617. Reason: This candidate is a duplicate of CVE-2026-43617. Notes: All CVE users should reference CVE-2026-43617 instead of this candidate...