Lucene search
+L

6 matches found

RedhatCVE
RedhatCVE
•added 2026/08/31 4:25 a.m.•11 views

CVE-2026-79780

A flaw was found in rclone. The application fails to properly sanitize IBM IAM bearer tokens and Server-Side Encryption with Customer-Provided Keys SSE-C encryption keys during S3 redirect callbacks. This allows credentials to be preserved across scheme or host changes. A remote attacker observin...

6CVSS5.8AI score0.00147EPSS
SaveExploits0References5
Tenable Nessus
Tenable Nessus
•added 2026/08/26 12:00 a.m.•17 views

Linux Distros Unpatched Vulnerability : CVE-2026-79780

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - rclone before v1.75.0 fails to sanitize IBM IAM bearer tokens and SSE-C encryption keys during S3 redirect callbacks, allowing credentials to be preserved acros...

6CVSS5.9AI score0.00147EPSS
SaveExploits0References3
Vulnrichment
Vulnrichment
•added 2026/08/25 3:16 p.m.•10 views

CVE-2026-79780 rclone before v1.75.0 Credential Exposure via S3 Redirect

rclone before v1.75.0 fails to sanitize IBM IAM bearer tokens and SSE-C encryption keys during S3 redirect callbacks, allowing credentials to be preserved across scheme or host changes. Attackers observing network traffic from a trusted endpoint can capture reusable IBM IAM tokens on same-host...

6CVSS5.8AI score0.00147EPSS
SaveExploits0References2
OSV
OSV
•added 2026/08/25 3:16 p.m.•13 views

CVE-2026-79780 rclone before v1.75.0 Credential Exposure via S3 Redirect

rclone before v1.75.0 fails to sanitize IBM IAM bearer tokens and SSE-C encryption keys during S3 redirect callbacks, allowing credentials to be preserved across scheme or host changes. Attackers observing network traffic from a trusted endpoint can capture reusable IBM IAM tokens on same-host...

6CVSS5.5AI score
SaveExploits0References4
Debian CVE
Debian CVE
•added 2026/08/25 3:16 p.m.•16 views

CVE-2026-79780

rclone before v1.75.0 fails to sanitize IBM IAM bearer tokens and SSE-C encryption keys during S3 redirect callbacks, allowing credentials to be preserved across scheme or host changes. Attackers observing network traffic from a trusted endpoint can capture reusable IBM IAM tokens on same-host...

6CVSS5.8AI score0.00147EPSS
SaveExploits0
Positive Technologies
Positive Technologies
•added 2026/08/05 12:00 a.m.•22 views

PT-2026-81369

Name of the Vulnerable Software and Affected Versions rclone versions prior to 1.75.0 Description The software fails to sanitize IBM IAM bearer tokens and SSE-C Server-Side Encryption with Customer-Provided Keys encryption keys during S3 redirect callbacks. This allows credentials to be preserved...

6CVSS5.8AI score0.00147EPSS
SaveExploits0References17
Rows per page
Query Builder