7 matches found
CVE-2026-70454
creationtimestamp| type| source ---|---|--- 2026-08-17 20:02:35+00:00| seen| https://bsky.app/profile/bootintel.bsky.social/post/3mtcinfmd4b25...
CVE-2026-70454
rsync 3.2.0 through 3.2.3 openssl mode and rsync-ssl through 3.4.4 stunnel mode contain a TLS certificate validation vulnerability that allows on-path attackers to intercept encrypted sessions by presenting self-signed or otherwise invalid certificates. Attackers can exploit the failure to valida...
DEBIAN-CVE-2026-70454
rsync 3.2.0 through 3.2.3 openssl mode and rsync-ssl through 3.4.4 stunnel mode contain a TLS certificate validation vulnerability that allows on-path attackers to intercept encrypted sessions by presenting self-signed or otherwise invalid certificates. Attackers can exploit the failure to valida...
UBUNTU-CVE-2026-70454
rsync 3.2.0 through 3.2.3 openssl mode and rsync-ssl through 3.4.4 stunnel mode contain a TLS certificate validation vulnerability that allows on-path attackers to intercept encrypted sessions by presenting self-signed or otherwise invalid certificates. Attackers can exploit the failure to valida...
CVE-2026-70454
CVE-2026-70454 affects rsync 3.2.0–3.2.3 (openssl mode) and rsync-ssl up to 3.4.4 (stunnel mode). The TLS certificate validation is faulty, allowing on‑path attackers to intercept or tamper encrypted sessions by presenting self‑signed or invalid certificates. Exploitation hinges on failure to val...
CVE-2026-70454
rsync 3.2.0 through 3.2.3 openssl mode and rsync-ssl through 3.4.4 stunnel mode contain a TLS certificate validation vulnerability that allows on-path attackers to intercept encrypted sessions by presenting self-signed or otherwise invalid certificates. Attackers can exploit the failure to valida...
Linux Distros Unpatched Vulnerability : CVE-2026-70454
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - rsync 3.2.0 through 3.2.3 openssl mode and rsync-ssl through 3.4.4 stunnel mode contain a TLS certificate validation vulnerability that allows on-path attackers...