CVE Search Engine - Security Vulnerabilities and Exploits Search Tool

show all

18662 matches found

NVD•added 2026/03/05 4:16 p.m.•39 views

CVE-2026-30783

A vulnerability in rustdesk-client RustDesk Client rustdesk-client on Windows, MacOS, Linux, iOS, Android, WebClient Client signaling, API sync loop, config management modules allows Privilege Abuse. This vulnerability is associated with program files src/rendezvousmediator.Rs, src/hbbshttp/sync....

9.8CVSS0.00432EPSS

SaveExploits1References3

Snyk•added 2026/03/05 4:15 p.m.•12 views

Allocation of Resources Without Limits or Throttling

Overview Affected versions of this package are vulnerable to Allocation of Resources Without Limits or Throttling due to unbounded processing of responses in the ForwardAuth middleware due to the lack of restrictions for maxResponseBodySize configuration. An attacker can cause resource exhaustion...

6.9CVSS7.9AI score0.00508EPSS

SaveExploits0References2

osv_cve•added 2026/03/05 4:04 p.m.•33 views

CVE-2026-30785 RustDesk Encrypts Local Passwords with World-Readable Machine ID and Fixed Zero Nonce (XSalsa20-Poly1305)

Improperly Controlled Modification of Object Prototype Attributes 'Prototype Pollution', Use of Password Hash With Insufficient Computational Effort vulnerability in rustdesk-client RustDesk Client rustdesk, hbbcommon on Windows, MacOS, Linux Password security module, config encryption, machine U...

8.2CVSS5.8AI score0.00095EPSS

SaveExploits1References8

Cvelist•added 2026/03/05 3:52 p.m.•71 views

CVE-2026-30783 RustDesk Client Can Orphan API Channel to Ignore All Admin Commands and ACL Policies

4.8CVSS0.00432EPSS

SaveExploits1References3

CVE•added 2026/03/05 3:52 p.m.•87 views

CVE-2026-30783

CVE-2026-30783 affects rustdesk-client across Windows, macOS, Linux, iOS, Android, and WebClient up to version 1.4.5. The issue is tied to client signaling, API sync loop, and config handling, specifically in src/rendezvous_mediator.Rs and src/hbbs_http/sync.Rs. Root cause details and exact explo...

9.8CVSS5.8AI score0.00432EPSS

SaveExploits1References3Affected Software1

attackerkb•added 2026/03/05 3:52 p.m.•25 views

CVE-2026-30783

9.8CVSS5.8AI score0.00432EPSS

SaveExploits1References4

Vulnrichment•added 2026/03/05 3:52 p.m.•21 views

CVE-2026-30783 RustDesk Client Can Orphan API Channel to Ignore All Admin Commands and ACL Policies

4.8CVSS5.8AI score0.00432EPSS

SaveExploits1References3

osv_cve•added 2026/03/05 3:52 p.m.•30 views

CVE-2026-30783 RustDesk Client Can Orphan API Channel to Ignore All Admin Commands and ACL Policies

4.8CVSS5.8AI score0.00432EPSS

SaveExploits1References7

osv_cve•added 2026/03/05 3:35 p.m.•36 views

CVE-2026-30797 RustDesk rustdesk://config/ URI Silently Re-homes Client to Attacker-Controlled Server

Missing Authorization vulnerability in rustdesk-client RustDesk Client rustdesk-client on Windows, MacOS, Linux, iOS, Android Flutter URI scheme handler, config import modules allows Application API Message Manipulation via Man-in-the-Middle. This vulnerability is associated with program files...

9.3CVSS5.8AI score0.00522EPSS

SaveExploits1References7

attackerkb•added 2026/03/05 3:35 p.m.•16 views

CVE-2026-30797

9.3CVSS5.8AI score0.00522EPSS

SaveExploits1References4

Vulnrichment•added 2026/03/05 3:35 p.m.•15 views

CVE-2026-30797 RustDesk rustdesk://config/ URI Silently Re-homes Client to Attacker-Controlled Server

9.3CVSS5.8AI score0.00522EPSS

SaveExploits1References3

CVE•added 2026/03/05 3:35 p.m.•78 views

CVE-2026-30797

CVE-2026-30797 describes a Missing Authorization vulnerability in the RustDesk Client (rustdesk-client) across Windows, macOS, Linux, iOS, and Android. The issue involves the Flutter URI scheme handler and config import modules, permitting Application API Message Manipulation via Man-in-the-Middl...

9.3CVSS5.8AI score0.00522EPSS

SaveExploits1References3Affected Software1

Cvelist•added 2026/03/05 3:35 p.m.•72 views

CVE-2026-30797 RustDesk rustdesk://config/ URI Silently Re-homes Client to Attacker-Controlled Server

9.3CVSS0.00522EPSS

SaveExploits1References3

EUVD•added 2026/03/05 3:30 p.m.•28 views

EUVD-2026-9825

Use of a Broken or Risky Cryptographic Algorithm vulnerability in rustdesk-client RustDesk Client rustdesk-client on Windows, MacOS, Linux, iOS, Android, WebClient Config import, URI scheme handler, CLI --config modules allows Retrieve Embedded Sensitive Data. This vulnerability is associated wit...

8.7CVSS5.8AI score0.00273EPSS

SaveExploits1References2

NVD•added 2026/03/05 3:16 p.m.•36 views

CVE-2026-3598

Use of a Broken or Risky Cryptographic Algorithm vulnerability in rustdesk-server-pro RustDesk Server Pro rustdesk-server-pro on Windows, MacOS, Linux Config string generation, web console export modules allows Retrieve Embedded Sensitive Data. This vulnerability is associated with program routin...

8.7CVSS0.00262EPSS

SaveExploits1References3

NVD•added 2026/03/05 3:16 p.m.•37 views

CVE-2026-30791

8.7CVSS0.00273EPSS

SaveExploits1References3

Vulnrichment•added 2026/03/05 2:47 p.m.•19 views

CVE-2026-30791 RustDesk Client Accepts Pseudo-Encrypted Config Strings Without Cryptographic Validation

8.7CVSS5.8AI score0.00273EPSS

SaveExploits1References3

Cvelist•added 2026/03/05 2:47 p.m.•73 views

CVE-2026-30791 RustDesk Client Accepts Pseudo-Encrypted Config Strings Without Cryptographic Validation

8.7CVSS0.00273EPSS

SaveExploits1References3

osv_cve•added 2026/03/05 2:47 p.m.•29 views

CVE-2026-30791 RustDesk Client Accepts Pseudo-Encrypted Config Strings Without Cryptographic Validation

8.7CVSS5.9AI score0.00273EPSS

SaveExploits1References7

attackerkb•added 2026/03/05 2:47 p.m.•27 views

CVE-2026-30791

8.7CVSS5.8AI score0.00273EPSS

SaveExploits1References4

Rows per page

Query Builder

Family

Bulletin Type

Min CVSS Score

Date

Order by