CVE-2026-44508

The CVE-2026-44508 issue affects rsync prior to 3.4.3, where the receiver’s compressed-token decoder increments a 32-bit signed counter without overflow protection. An attacker-controlled overflow could leak in-process memory contents, including environment variables, passwords, and memory pointe...

CVE-2026-44508 Rsync: Integer overflow in compressed-token decoding

Rsync is a file-copying tool that uses a delta-transfer algorithm to synchronize remote and local files. In versions prior to 3.4.3, the receiver's compressed-token decoder accumulated a 32-bit signed counter without checking for overflow. A malicious sender can trigger an overflow that with...

EUVD-2026-46105

Rsync is a file-copying tool that uses a delta-transfer algorithm to synchronize remote and local files. In versions prior to 3.4.3, when using a daemon configured with a chroot, the reverse DNS lookup of the connecting client was performed after the chroot had been entered. If the chroot did not...

CVE-2026-44507

CVE-2026-44507 : Rsync before 3.4.3 allows a hostname/ACL bypass in daemon mode with chroot due to reverse DNS lookups occurring after chroot when resolving the client hostname. If the chroot lacks resolv.conf, nsswitch.conf, /etc/hosts, or NSS modules, the lookup can yield the hostname “UNKNOWN,...

CVE-2026-44507

Rsync is a file-copying tool that uses a delta-transfer algorithm to synchronize remote and local files. In versions prior to 3.4.3, when using a daemon configured with a chroot, the reverse DNS lookup of the connecting client was performed after the chroot had been entered. If the chroot did not...

CVE-2026-44507 Rsync: hostname/ACL bypass on DNS-lookup failure

Rsync is a file-copying tool that uses a delta-transfer algorithm to synchronize remote and local files. In versions prior to 3.4.3, when using a daemon configured with a chroot, the reverse DNS lookup of the connecting client was performed after the chroot had been entered. If the chroot did not...

CVE-2026-56623

The CVE-2026-56623 issue affects deployments using Apache MINA SSHD’s sshd-git to implement a git server on Windows. The vulnerability arises from Windows-specific path validation that is partly ineffective, potentially allowing an authenticated remote user to access git repositories outside the ...

EUVD-2026-46104

Path traversal on Windows in Apache MINA SSHD component sshd-git. Apache MINA SSHD is a Java library for client-side and server-side SSH. A git server implemented with Apache MINA SSHD component sshd-git and running on Windows could allow an authenticated remote user access to git repositories...

CVE-2026-56623

Path traversal on Windows in Apache MINA SSHD component sshd-git. Apache MINA SSHD is a Java library for client-side and server-side SSH. A git server implemented with Apache MINA SSHD component sshd-git and running on Windows could allow an authenticated remote user access to git repositories...

CVE-2026-56623 Apache MINA SSHD: Path traversal in org.apache.sshd:sshd-git on Windows

Path traversal on Windows in Apache MINA SSHD component sshd-git. Apache MINA SSHD is a Java library for client-side and server-side SSH. A git server implemented with Apache MINA SSHD component sshd-git and running on Windows could allow an authenticated remote user access to git repositories...

CVE-2026-56624

The vulnerability CVE-2026-56624 affects Apache MINA SSHD (server-side) where OpenSSH user certificates with unsupported options, specifically force-command and verify-required, were not validated during authentication. The issue allows a user with such a certificate to potentially run commands b...

EUVD-2026-46103

Improper certificate validation in Apache MINA SSHD server-side. Apache MINA SSHD is a Java library for client-side and server-side SSH. Server-side OpenSSH user certificate validation during user authentication in an Apache MINA SSHD server did not check for the unsupported force-command or...

CVE-2026-56624

Improper certificate validation in Apache MINA SSHD server-side. Apache MINA SSHD is a Java library for client-side and server-side SSH. Server-side OpenSSH user certificate validation during user authentication in an Apache MINA SSHD server did not check for the unsupported force-command or...

CVE-2026-56624 Apache MINA SSHD: SSH certificate options lack validations

Improper certificate validation in Apache MINA SSHD server-side. Apache MINA SSHD is a Java library for client-side and server-side SSH. Server-side OpenSSH user certificate validation during user authentication in an Apache MINA SSHD server did not check for the unsupported force-command or...

CVE-2026-58624

The CVE affects SSH servers implemented with Apache MINA SSHD that use the GitPgmCommandFactory. The root cause is improper input validation in the sshd-git GitPgmCommandFactory, which allowed an authenticated SSH user to run any JGit command, including commands that could write files on the serv...

EUVD-2026-46101

Improper input validation in sshd-git in Apache MINA SSHD. Apache MINA SSHD is a Java library for client-side and server-side SSH. Component org.apache.sshd:sshd-git provides though its GitPgmCommandFactory a way to configure an Apache MINA SSHD server such that SSH clients can remotely execute g...

CVE-2026-58624

Improper input validation in sshd-git in Apache MINA SSHD. Apache MINA SSHD is a Java library for client-side and server-side SSH. Component org.apache.sshd:sshd-git provides though its GitPgmCommandFactory a way to configure an Apache MINA SSHD server such that SSH clients can remotely execute g...

CVE-2026-58624 Apache MINA SSHD: Remote execution of JGit commands can write files on the server

Improper input validation in sshd-git in Apache MINA SSHD. Apache MINA SSHD is a Java library for client-side and server-side SSH. Component org.apache.sshd:sshd-git provides though its GitPgmCommandFactory a way to configure an Apache MINA SSHD server such that SSH clients can remotely execute g...

EUVD-2026-46100

Rsync is a file-copying tool that uses a delta-transfer algorithm to synchronize remote and local files. In versions prior to 3.4.3, previous bug fixes for symlink races in open calls missed races in other path based system calls like chmod and chown. For rsync daemons with "use chroot = no" this...

CVE-2026-44509

Rsync has a local-file-access vulnerability (CVE-2026-44509) in versions prior to 3.4.3 due to symlink race bugs not covered by earlier fixes for open(); in rsync daemons with use chroot = no, an attacker with local filesystem access can change permissions, ownership or timestamps on files outsid...