Lucene search
+L

259 matches found

Vulnrichment
Vulnrichment
•added 2026/03/05 3:24 p.m.•14 views

CVE-2026-30794

...

5.8AI score0.00313EPSS
SaveExploits0
CVE
CVE
•added 2026/03/05 3:24 p.m.•76 views

CVE-2026-30794

CVE-2026-30794 entry is rejected/not used per the Initial Description.

5.9AI score0.00313EPSS
SaveExploits0
osv_cve
osv_cve
•added 2026/03/05 3:24 p.m.•17 views

CVE-2026-30794 RustDesk HTTP Client Silently Accepts Invalid TLS Certificates After Handshake Failure

Improper Certificate Validation vulnerability in rustdesk-client RustDesk Client rustdesk-client on Windows, MacOS, Linux, iOS, Android HTTP API client, TLS transport modules allows Adversary in the Middle AiTM. This vulnerability is associated with program files src/hbbshttp/httpclient.Rs and...

9.1CVSS5.9AI score0.00313EPSS
SaveExploits0References7
Cvelist
Cvelist
•added 2026/03/05 3:24 p.m.•64 views

CVE-2026-30794

...

0.00313EPSS
SaveExploits0
attackerkb
attackerkb
•added 2026/03/05 3:21 p.m.•11 views

CVE-2026-30793

Cross-Site Request Forgery CSRF vulnerability in rustdesk-client RustDesk Client rustdesk-client on Windows, MacOS, Linux, iOS, Android Flutter URI scheme handler, FFI bridge modules allows Privilege Escalation. This vulnerability is associated with program files flutter/lib/common.Dart,...

9.3CVSS5.8AI score0.00361EPSS
SaveExploits1References5
Cvelist
Cvelist
•added 2026/03/05 3:21 p.m.•69 views

CVE-2026-30793 RustDesk Flutter URI Handler Sets Permanent Password Without Privilege Check or User Confirmation

Cross-Site Request Forgery CSRF vulnerability in rustdesk-client RustDesk Client rustdesk-client on Windows, MacOS, Linux, iOS, Android Flutter URI scheme handler, FFI bridge modules allows Privilege Escalation. This vulnerability is associated with program files flutter/lib/common.Dart,...

9.3CVSS0.00361EPSS
SaveExploits1References4
Vulnrichment
Vulnrichment
•added 2026/03/05 3:21 p.m.•11 views

CVE-2026-30793 RustDesk Flutter URI Handler Sets Permanent Password Without Privilege Check or User Confirmation

Cross-Site Request Forgery CSRF vulnerability in rustdesk-client RustDesk Client rustdesk-client on Windows, MacOS, Linux, iOS, Android Flutter URI scheme handler, FFI bridge modules allows Privilege Escalation. This vulnerability is associated with program files flutter/lib/common.Dart,...

9.3CVSS5.8AI score0.00361EPSS
SaveExploits1References4
CVE
CVE
•added 2026/03/05 3:21 p.m.•113 views

CVE-2026-30793

The CVE-2026-30793 entry concerns RustDesk Client (rustdesk-client) on Windows, macOS, Linux, iOS, Android (Flutter URI scheme handler, FFI bridge modules). A Cross-Site Request Forgery (CSRF) vulnerability affects the client via rustdesk://password/ flows and related program routines (flutter/li...

9.8CVSS5.8AI score0.00361EPSS
SaveExploits1References4Affected Software1
osv_cve
osv_cve
•added 2026/03/05 3:21 p.m.•13 views

CVE-2026-30793 RustDesk Flutter URI Handler Sets Permanent Password Without Privilege Check or User Confirmation

Cross-Site Request Forgery CSRF vulnerability in rustdesk-client RustDesk Client rustdesk-client on Windows, MacOS, Linux, iOS, Android Flutter URI scheme handler, FFI bridge modules allows Privilege Escalation. This vulnerability is associated with program files flutter/lib/common.Dart,...

9.3CVSS5.9AI score
SaveExploits0References8
NVD
NVD
•added 2026/03/05 3:16 p.m.•34 views

CVE-2026-3598

Use of a Broken or Risky Cryptographic Algorithm vulnerability in rustdesk-server-pro RustDesk Server Pro rustdesk-server-pro on Windows, MacOS, Linux Config string generation, web console export modules allows Retrieve Embedded Sensitive Data. This vulnerability is associated with program routin...

8.7CVSS0.00339EPSS
SaveExploits1References3
NVD
NVD
•added 2026/03/05 3:16 p.m.•37 views

CVE-2026-30791

Use of a Broken or Risky Cryptographic Algorithm vulnerability in rustdesk-client RustDesk Client rustdesk-client on Windows, MacOS, Linux, iOS, Android, WebClient Config import, URI scheme handler, CLI --config modules allows Retrieve Embedded Sensitive Data. This vulnerability is associated wit...

8.7CVSS0.00353EPSS
SaveExploits1References3
Cvelist
Cvelist
•added 2026/03/05 3:14 p.m.•60 views

CVE-2026-30792 RustDesk Client Blindly Merges Unauthenticated Strategy Payloads, Bypassing Local Security Settings

A vulnerability in rustdesk-client RustDesk Client rustdesk-client on Windows, MacOS, Linux, iOS, Android, WebClient Strategy sync, HTTP API client, config options engine modules allows Application API Message Manipulation via Man-in-the-Middle. This vulnerability is associated with program files...

8.3CVSS0.00312EPSS
SaveExploits1References3
CVE
CVE
•added 2026/03/05 3:14 p.m.•81 views

CVE-2026-30792

CVE-2026-30792 affects RustDesk Client (Windows/macOS/Linux/iOS/Android/WebClient). Affected components include Strategy sync, HTTP API client, and Config::set_options() in files src/hbbs_http/sync.Rs and hbb_common/src/config.Rs. Root cause: the client blindly merges unauthenticated strategy pay...

8.3CVSS5.8AI score0.00312EPSS
SaveExploits1References3Affected Software1
attackerkb
attackerkb
•added 2026/03/05 3:14 p.m.•13 views

CVE-2026-30792

A vulnerability in rustdesk-client RustDesk Client rustdesk-client on Windows, MacOS, Linux, iOS, Android, WebClient Strategy sync, HTTP API client, config options engine modules allows Application API Message Manipulation via Man-in-the-Middle. This vulnerability is associated with program files...

9.1CVSS5.8AI score0.00312EPSS
SaveExploits1References4
Vulnrichment
Vulnrichment
•added 2026/03/05 3:14 p.m.•14 views

CVE-2026-30792 RustDesk Client Blindly Merges Unauthenticated Strategy Payloads, Bypassing Local Security Settings

A vulnerability in rustdesk-client RustDesk Client rustdesk-client on Windows, MacOS, Linux, iOS, Android, WebClient Strategy sync, HTTP API client, config options engine modules allows Application API Message Manipulation via Man-in-the-Middle. This vulnerability is associated with program files...

8.3CVSS5.8AI score0.00312EPSS
SaveExploits1References3
osv_cve
osv_cve
•added 2026/03/05 3:14 p.m.•20 views

CVE-2026-30792 RustDesk Client Blindly Merges Unauthenticated Strategy Payloads, Bypassing Local Security Settings

A vulnerability in rustdesk-client RustDesk Client rustdesk-client on Windows, MacOS, Linux, iOS, Android, WebClient Strategy sync, HTTP API client, config options engine modules allows Application API Message Manipulation via Man-in-the-Middle. This vulnerability is associated with program files...

8.3CVSS5.9AI score
SaveExploits0References7
Cvelist
Cvelist
•added 2026/03/05 2:47 p.m.•72 views

CVE-2026-30791 RustDesk Client Accepts Pseudo-Encrypted Config Strings Without Cryptographic Validation

Use of a Broken or Risky Cryptographic Algorithm vulnerability in rustdesk-client RustDesk Client rustdesk-client on Windows, MacOS, Linux, iOS, Android, WebClient Config import, URI scheme handler, CLI --config modules allows Retrieve Embedded Sensitive Data. This vulnerability is associated wit...

8.7CVSS0.00353EPSS
SaveExploits1References3
attackerkb
attackerkb
•added 2026/03/05 2:47 p.m.•27 views

CVE-2026-30791

Use of a Broken or Risky Cryptographic Algorithm vulnerability in rustdesk-client RustDesk Client rustdesk-client on Windows, MacOS, Linux, iOS, Android, WebClient Config import, URI scheme handler, CLI --config modules allows Retrieve Embedded Sensitive Data. This vulnerability is associated wit...

8.7CVSS5.8AI score0.00353EPSS
SaveExploits1References4
Vulnrichment
Vulnrichment
•added 2026/03/05 2:47 p.m.•18 views

CVE-2026-30791 RustDesk Client Accepts Pseudo-Encrypted Config Strings Without Cryptographic Validation

Use of a Broken or Risky Cryptographic Algorithm vulnerability in rustdesk-client RustDesk Client rustdesk-client on Windows, MacOS, Linux, iOS, Android, WebClient Config import, URI scheme handler, CLI --config modules allows Retrieve Embedded Sensitive Data. This vulnerability is associated wit...

8.7CVSS5.8AI score0.00353EPSS
SaveExploits1References3
CVE
CVE
•added 2026/03/05 2:47 p.m.•71 views

CVE-2026-30791

CVE-2026-30791 affects RustDesk Client up to version 1.4.5 across Windows, macOS, Linux, iOS, Android, and WebClient. The issue stems from use of a broken or risky cryptographic algorithm in config import, URI scheme handler, and CLI --config modules, enabling retrieval of embedded sensitive data...

8.7CVSS5.8AI score0.00353EPSS
SaveExploits1References3Affected Software1
Rows per page
Query Builder