R
Vendor security profile
RsyncProject
Product portfolio, patch evidence and exploitation signals in a single security scorecard
The data is combined from the CVE Program, NVD, CISA KEV and vendor security advisories.
Total CVEs35
Critical5
CISA KEV0
Public exploit0
Patch rate%6
Avg. CVSS7.8
12-month vulnerability rate
0
0
0
0
0
0
2
0
0
33
0
0
CVE KEV
CVE severity distribution
35toplam CVE
Critical5 (14%)
High20 (57%)
Medium10 (29%)
Patch and exploitation view
%6
Verified patch
%0
CISA KEV
%0
Public exploit
2Patch available
0Partial
0Workaround
0Vendor: no patch
33Unknown
Latest vulnerabilities
9.1
CVE-2026-70452
rsync 3.1.0 < 3.5.0 Access Control Bypass via DNS Resolution Failure
R
Patch status unknownEPSS %0
8.7
CVE-2026-70453
rsync < 3.5.0 Algorithmic Complexity DoS via hash_search()
R
Patch status unknownEPSS %1
7.6
CVE-2026-70454
rsync < 3.5.0 TLS Certificate Validation Bypass via SSL/OpenSSL Mode
R
Patch status unknownEPSS %0
8.7
CVE-2026-70455
rsync 3.4.2 < 3.5.0 DoS via --zt Zstandard Compression Thread Exhaustion
R
Patch status unknownEPSS %1
8.8
CVE-2026-70456
rsync 3.0.1 < 3.5.0 Heap Out-of-Bounds Write via read_args()
R
Patch status unknownEPSS %0
8.3
CVE-2026-70457
rsync 3.2.3 < 3.5.0 Out-of-Bounds Write via parse_size_arg()
R
Patch status unknownEPSS %0
8.8
CVE-2026-70458
rsync 3.0.0 < 3.5.0 Out-of-Bounds Write via FLAG_HLINKED Handling
R
Patch status unknownEPSS %0
6.9
CVE-2026-70459
rsync 3.0.0 < 3.5.0 Daemon Crash via Malformed File List Entry
R
Patch status unknownEPSS %1
9.2
CVE-2026-70460
rsync 2.3.3 < 3.5.0 Path Traversal via --partial-dir/--backup-dir Symlink
R
Patch status unknownEPSS %0
8.8
CVE-2026-70461
rsync 3.2.5 < 3.5.0 Heap Out-of-Bounds Write via files-from Entry
R
Patch status unknownEPSS %1