178269 matches found
CVE-2026-70452
rsync 3.1.0 before 3.5.0 contains an access control bypass vulnerability: DNS-resolution failures during hostname-based deny rule evaluation cause the daemon to skip the rule instead of denying, enabling unauthorized access to restricted module file trees by attackers who can trigger DNS failures...
CVE-2026-70452 rsync 3.1.0 < 3.5.0 Access Control Bypass via DNS Resolution Failure
rsync 3.1.0 before 3.5.0 contains an access control bypass vulnerability that allows remote attackers to circumvent hosts deny rules by inducing DNS resolution failures during hostname-based access control evaluation. When a DNS lookup for a hostname-based deny rule fails, the daemon skips the ru...
CVE-2026-70463 rsync 3.1.0 < 3.5.0 Authorization Bypass via auth users Directive Parsing
rsync 3.1.0 before 3.5.0 contains an authorization bypass in auth users directive parsing. The auth users parser uses comma-only tokenization when splitting the user list, which fails to correctly handle entries of the form @Group Name where the group name contains a space. The space within the...
EUVD-2026-58099
rsync daemon before 3.5.0 contains an IP address spoofing vulnerability that allows unauthenticated remote attackers to bypass IP-based access controls by sending a crafted PROXY protocol header with a forged source address. Attackers who can connect directly to the rsync daemon can inject a...
CVE-2026-53791
Technical details about CVE-2026-53791 are not publicly available in the provided documents. Monitor for updates from vendors and advisories.
CVE-2026-53791 rsync < 3.5.0 Daemon IP Spoofing via PROXY Protocol Header
rsync daemon before 3.5.0 contains an IP address spoofing vulnerability that allows unauthenticated remote attackers to bypass IP-based access controls by sending a crafted PROXY protocol header with a forged source address. Attackers who can connect directly to the rsync daemon can inject a...
CVE-2026-53791
rsync daemon before 3.5.0 contains an IP address spoofing vulnerability that allows unauthenticated remote attackers to bypass IP-based access controls by sending a crafted PROXY protocol header with a forged source address. Attackers who can connect directly to the rsync daemon can inject a...
CVE-2026-53791
rsync daemon before 3.5.0 contains an IP address spoofing vulnerability that allows unauthenticated remote attackers to bypass IP-based access controls by sending a crafted PROXY protocol header with a forged source address. Attackers who can connect directly to the rsync daemon can inject a...
CVE-2026-53791 rsync < 3.5.0 Daemon IP Spoofing via PROXY Protocol Header
rsync daemon before 3.5.0 contains an IP address spoofing vulnerability that allows unauthenticated remote attackers to bypass IP-based access controls by sending a crafted PROXY protocol header with a forged source address. Attackers who can connect directly to the rsync daemon can inject a...
CVE-2026-53791 rsync < 3.5.0 Daemon IP Spoofing via PROXY Protocol Header
rsync daemon before 3.5.0 contains an IP address spoofing vulnerability that allows unauthenticated remote attackers to bypass IP-based access controls by sending a crafted PROXY protocol header with a forged source address. Attackers who can connect directly to the rsync daemon can inject a...
CVE-2026-53786 rsync < 3.5.0 Filter Rule Bypass via --filter Merge Directive
rsync before 3.5.0 contains a filter rule bypass vulnerability that allows authenticated clients to override module-level filter restrictions by supplying malicious --filter merge file directives. Attackers can inject client-side merge file directives during filter evaluation to introduce rules...
[R2] Security Center Version 6.9.0 Fixes Multiple Vulnerabilities
R2 Security Center Version 6.9.0 Fixes Multiple Vulnerabilities Arnie Cabral Thu, 08/13/2026 - 10:35 Security Center leverages third-party software to help provide underlying functionality. Several of the third-party components curl, underscoreJS were found to contain vulnerabilities, and updated...
CVE-2026-73349
Unauthenticated Broken Access Control in GiveWP 4.16.6 versions...
CVE-2026-73353
Unauthenticated Broken Access Control in Revolut Gateway for WooCommerce 4.22.10 versions...
CVE-2026-73401
Unauthenticated Broken Access Control in InstaWP Connect = 0.1.3.7 versions...
CVE-2026-73403
Unauthenticated Broken Access Control in User Registration = 5.2.6 versions...
CVE-2026-66689
Unauthenticated Broken Access Control in Anti Spam and list cleaner AcyChecker = 2.0.0 versions...
CVE-2026-66691
Unauthenticated Broken Access Control in Nokri = 1.6.6 versions...