710 matches found
Rclone 访问控制错误漏洞
Rclone is a software developed by the Rclone team that can synchronize data asynchronously from cloud storage. This software supports various cloud storage services such as Google Drive, Amazon Drive, S3, Dropbox, Backblaze B2, One Drive, Swift, Hubic, Cloudfiles, Google Cloud Storage, and Yandex...
OPENSUSE-SU-2026:10584-1 rclone-1.73.5-1.1 on GA media
These are all security issues fixed in the rclone-1.73.5-1.1 package on the GA media of openSUSE Tumbleweed...
PT-2026-33833
Name of the Vulnerable Software and Affected Versions Rclone versions 1.48.0 through 1.73.4 Description The RC endpoint "operations/fsinfo" is exposed without authentication and accepts attacker-controlled fs input. Since the rc.GetFs function supports inline backend definitions, an unauthenticat...
PT-2026-33832
Name of the Vulnerable Software and Affected Versions Rclone versions 1.45.0 through 1.73.4 Description An authorization bypass exists in the Remote Control RC interface of Rclone. The RC endpoint "options/set" is exposed without requiring authentication, allowing an unauthenticated attacker to...
CVE-2026-32281 vulnerabilities
Vulnerabilities for packages: oras, nri-redis, kine, php-fpmexporter, rancher-webhook, cadvisor, wal-g, caddy, crossplane-provider-family-azure, infinispan-operator, terraform-provider-tls, sonobuoy, http-echo, victoriametrics, redis-operator, cloud-sql-proxy, zot, git-sync, kubescape-operator,...
CVE-2026-32283 vulnerabilities
Vulnerabilities for packages: oras, nri-redis, kine, php-fpmexporter, rancher-webhook, cadvisor, wal-g, caddy, crossplane-provider-family-azure, infinispan-operator, terraform-provider-tls, sonobuoy, http-echo, victoriametrics, redis-operator, cloud-sql-proxy, zot, git-sync, kubescape-operator,...
GHSA-7MR4-XJXG-34G6 vulnerabilities
Vulnerabilities for packages: runc, seaweedfs, temporal, emissary, kine, trillian, helm-set-status, falco-exporter, cadvisor, prometheus-adapter, wal-g, cert-manager-csi-driver, flannel, caddy, crossplane-provider-family-azure, sriov-network-device-plugin, kubescape, terraform-provider-random,...
GHSA-XMRV-PMRH-HHX2 vulnerabilities
Vulnerabilities for packages: cloudprober-fips, crossplane-provider-aws-route53-fips, velero, trivy-operator-fips, aws-s3-controller, gitlab-runner-fips, kots, prometheus-mongodb-exporter-fips, aws-network-policy-agent, vault-env, longhorn-backing-image-manager, kyverno-policy-reporter-fips,...
CVE-2026-32285 vulnerabilities
Vulnerabilities for packages: opentelemetry-collector, teleport, rclone-fips, gitlab-runner, gitlab-runner-fips, commercial-grafana, influxd, terragrunt, lazygit, deck, datadog-agent, grafana-beyla, witness, chainloop-cli-fips, k3s, loki, loki-fips, tempo-fips, vcluster, grafana-fips, jfrog-cli,...
CVE-2026-32285 vulnerabilities
Vulnerabilities for packages: grafana, loki, maru, gitlab-runner, nfpm, terraform-mcp-server, terragrunt, goreleaser, teleport, ollama, eksctl, vcluster, opentelemetry-collector-contrib, k8sgpt, kubevela, tempo, redpanda, witness, cri-tools, minio, dagger, lazygit, rclone, datadog-agent,...
rclone-1.73.3-1.1 on GA media (moderate)
rclone-1.73.3-1.1 on GA media Announcement ID: openSUSE-SU-2026:10419-1 Rating: moderate Cross-References: CVE-2026-33186 CVSS scores: CVE-2026-33186 SUSE : 8.1 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N CVE-2026-33186 SUSE : 8.6 CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N...
OPENSUSE-SU-2026:10419-1 rclone-1.73.3-1.1 on GA media
These are all security issues fixed in the rclone-1.73.3-1.1 package on the GA media of openSUSE Tumbleweed...
rclone-1.73.2-1.1 on GA media (moderate)
rclone-1.73.2-1.1 on GA media Announcement ID: openSUSE-SU-2026:10313-1 Rating: moderate Cross-References: CVE-2026-1229 CVE-2026-27141 CVSS scores: CVE-2026-27141 SUSE : 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H CVE-2026-27141 SUSE : 8.7...
OPENSUSE-SU-2026:10313-1 rclone-1.73.2-1.1 on GA media
These are all security issues fixed in the rclone-1.73.2-1.1 package on the GA media of openSUSE Tumbleweed...
rclone-1.73.1-1.1 on GA media (moderate)
rclone-1.73.1-1.1 on GA media Announcement ID: openSUSE-SU-2026:10224-1 Rating: moderate Cross-References: CVE-2025-68121 CVSS scores: CVE-2025-68121 SUSE : 7.4 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N CVE-2025-68121 SUSE : 7.6 CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:P/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N...
OPENSUSE-SU-2026:10224-1 rclone-1.73.1-1.1 on GA media
These are all security issues fixed in the rclone-1.73.1-1.1 package on the GA media of openSUSE Tumbleweed...
[SECURITY] Fedora 42 Update: rclone-1.72.1-1.fc42
"rsync for cloud storage" - Google Drive, S3, Dropbox, Backblaze B2, One Driv e, Swift, Hubic, Wasabi, Google Cloud Storage, Azure Blob, Azure Files, Yandex Files...
Fedora: Security Advisory (FEDORA-2026-b4a6ca0bd0)
The remote host is missing an update for the SPDX-FileCopyrightText: 2026 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Fedora 42 : rclone (2026-b4a6ca0bd0)
The remote Fedora 42 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2026-b4a6ca0bd0 advisory. Update to 1.72.1 Tenable has extracted the preceding description block directly from the Fedora security advisory. Note that Nessus has not tested f...