{"schema_version":1,"title":"RustDesk Client vulnerabilities","summary":"Junglewise Threat Intelligence has tracked 7 vulnerabilities in RustDesk Client: 0 in the last 7 days and 0 in the last 90 days, 3 of them critical and 0 exploited in the wild. The most recent, CVE-2026-30798, was published on 5 March 2026.","url":"https://junglewise.ai/threats/technologies/rustdesk-client","json_url":"https://junglewise.ai/threats/technologies/rustdesk-client.json","publisher":"Junglewise Threat Intelligence","license":"CC-BY-4.0","license_url":"https://creativecommons.org/licenses/by/4.0/","attribution":"Junglewise Threat Intelligence, https://junglewise.ai/threats/technologies/rustdesk-client","sources":"NVD, GitHub Security Advisories, OSV, the CISA Known Exploited Vulnerabilities catalog, FIRST EPSS and vendor advisories","kind":"technology","counts":{"high":4,"all_time":7,"critical":3,"exploited":0,"last_7_days":0,"last_30_days":0,"last_90_days":0,"last_365_days":7},"latest":[{"cve":"CVE-2026-30798","cvss":7.5,"epss":0.0029,"slug":"cve-2026-30798-rustdesk-client-remote-denial-of-service-in-heartbeat-loop","title":"RustDesk Client Remote Denial of Service in Heartbeat Loop","severity":"high","exploited":false,"published_at":"2026-03-05T16:16:21.333+00:00","url":"https://junglewise.ai/threats/cve-2026-30798-rustdesk-client-remote-denial-of-service-in-heartbeat-loop"},{"cve":"CVE-2026-30796","cvss":7.5,"epss":0.0028,"slug":"cve-2026-30796-rustdesk-client-plaintext-credential-disclosure-in-heartbeat-sync","title":"RustDesk Client plaintext credential disclosure in heartbeat sync","severity":"high","exploited":false,"published_at":"2026-03-05T16:16:21.007+00:00","url":"https://junglewise.ai/threats/cve-2026-30796-rustdesk-client-plaintext-credential-disclosure-in-heartbeat-sync"},{"cve":"CVE-2026-30794","cvss":8.1,"epss":0.0031,"slug":"cve-2026-30794-rustdesk-client-improper-certificate-validation-in-tls-transport","title":"RustDesk Client improper certificate validation in TLS transport modules","severity":"high","exploited":false,"published_at":"2026-03-05T16:16:20.177+00:00","url":"https://junglewise.ai/threats/cve-2026-30794-rustdesk-client-improper-certificate-validation-in-tls-transport"},{"cve":"CVE-2026-30792","cvss":8.1,"epss":0.0049,"slug":"cve-2026-30792-rustdesk-client-remote-strategy-injection-via-man-in-the-middle","title":"RustDesk Client Remote Strategy Injection via Man-in-the-Middle","severity":"high","exploited":false,"published_at":"2026-03-05T16:16:19.84+00:00","url":"https://junglewise.ai/threats/cve-2026-30792-rustdesk-client-remote-strategy-injection-via-man-in-the-middle"},{"cve":"CVE-2026-30790","cvss":9.8,"epss":0.004,"slug":"cve-2026-30790-rustdesk-client-and-server-weak-password-hashing-and-credential","title":"RustDesk Client and Server weak password hashing and credential exposure","severity":"critical","exploited":false,"published_at":"2026-03-05T16:16:19.703+00:00","url":"https://junglewise.ai/threats/cve-2026-30790-rustdesk-client-and-server-weak-password-hashing-and-credential"},{"cve":"CVE-2026-30789","cvss":9.8,"epss":0.0042,"slug":"cve-2026-30789-rustdesk-client-authentication-bypass-via-session-replay-and-weak","title":"RustDesk Client authentication bypass via session replay and weak hashing","severity":"critical","exploited":false,"published_at":"2026-03-05T16:16:19.56+00:00","url":"https://junglewise.ai/threats/cve-2026-30789-rustdesk-client-authentication-bypass-via-session-replay-and-weak"},{"cve":"CVE-2026-30783","cvss":9.8,"epss":0.0059,"slug":"cve-2026-30783-rustdesk-client-privilege-abuse-via-unauthenticated-strategy","title":"RustDesk Client privilege abuse via unauthenticated strategy injection","severity":"critical","exploited":false,"published_at":"2026-03-05T16:16:18.91+00:00","url":"https://junglewise.ai/threats/cve-2026-30783-rustdesk-client-privilege-abuse-via-unauthenticated-strategy"}],"weekly":[{"week":"2026-06-29","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-07-06","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-07-13","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-07-20","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-07-27","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-08-03","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-08-10","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-08-17","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-08-24","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-08-31","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-09-07","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-09-14","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-09-21","critical":0,"exploited":0,"vulnerabilities":0}],"related":[{"name":"Rustdesk","slug":"rustdesk","vulnerabilities":11,"url":"https://junglewise.ai/threats/technologies/rustdesk"},{"name":"RustDesk Server Pro","slug":"rustdesk-server-pro","vulnerabilities":3,"url":"https://junglewise.ai/threats/technologies/rustdesk-server-pro"}],"technology":{"hub":true,"name":"RustDesk Client","slug":"rustdesk-client","vendor":{"name":"Rustdesk","slug":"rustdesk","url":"https://junglewise.ai/threats/vendors/rustdesk"},"aliases":[],"category":"application","homepage":"https://rustdesk.com/","repo_url":"https://github.com/rustdesk/rustdesk","description":"A remote desktop software client that allows for remote access and control of computers.","url":"https://junglewise.ai/threats/technologies/rustdesk-client"},"most_severe":[{"cve":"CVE-2026-30783","cvss":9.8,"epss":0.0059,"slug":"cve-2026-30783-rustdesk-client-privilege-abuse-via-unauthenticated-strategy","title":"RustDesk Client privilege abuse via unauthenticated strategy injection","severity":"critical","exploited":false,"published_at":"2026-03-05T16:16:18.91+00:00","url":"https://junglewise.ai/threats/cve-2026-30783-rustdesk-client-privilege-abuse-via-unauthenticated-strategy"},{"cve":"CVE-2026-30789","cvss":9.8,"epss":0.0042,"slug":"cve-2026-30789-rustdesk-client-authentication-bypass-via-session-replay-and-weak","title":"RustDesk Client authentication bypass via session replay and weak hashing","severity":"critical","exploited":false,"published_at":"2026-03-05T16:16:19.56+00:00","url":"https://junglewise.ai/threats/cve-2026-30789-rustdesk-client-authentication-bypass-via-session-replay-and-weak"},{"cve":"CVE-2026-30790","cvss":9.8,"epss":0.004,"slug":"cve-2026-30790-rustdesk-client-and-server-weak-password-hashing-and-credential","title":"RustDesk Client and Server weak password hashing and credential exposure","severity":"critical","exploited":false,"published_at":"2026-03-05T16:16:19.703+00:00","url":"https://junglewise.ai/threats/cve-2026-30790-rustdesk-client-and-server-weak-password-hashing-and-credential"},{"cve":"CVE-2026-30792","cvss":8.1,"epss":0.0049,"slug":"cve-2026-30792-rustdesk-client-remote-strategy-injection-via-man-in-the-middle","title":"RustDesk Client Remote Strategy Injection via Man-in-the-Middle","severity":"high","exploited":false,"published_at":"2026-03-05T16:16:19.84+00:00","url":"https://junglewise.ai/threats/cve-2026-30792-rustdesk-client-remote-strategy-injection-via-man-in-the-middle"},{"cve":"CVE-2026-30794","cvss":8.1,"epss":0.0031,"slug":"cve-2026-30794-rustdesk-client-improper-certificate-validation-in-tls-transport","title":"RustDesk Client improper certificate validation in TLS transport modules","severity":"high","exploited":false,"published_at":"2026-03-05T16:16:20.177+00:00","url":"https://junglewise.ai/threats/cve-2026-30794-rustdesk-client-improper-certificate-validation-in-tls-transport"},{"cve":"CVE-2026-30798","cvss":7.5,"epss":0.0029,"slug":"cve-2026-30798-rustdesk-client-remote-denial-of-service-in-heartbeat-loop","title":"RustDesk Client Remote Denial of Service in Heartbeat Loop","severity":"high","exploited":false,"published_at":"2026-03-05T16:16:21.333+00:00","url":"https://junglewise.ai/threats/cve-2026-30798-rustdesk-client-remote-denial-of-service-in-heartbeat-loop"},{"cve":"CVE-2026-30796","cvss":7.5,"epss":0.0028,"slug":"cve-2026-30796-rustdesk-client-plaintext-credential-disclosure-in-heartbeat-sync","title":"RustDesk Client plaintext credential disclosure in heartbeat sync","severity":"high","exploited":false,"published_at":"2026-03-05T16:16:21.007+00:00","url":"https://junglewise.ai/threats/cve-2026-30796-rustdesk-client-plaintext-credential-disclosure-in-heartbeat-sync"}],"generated_at":"2026-09-27T03:07:00.185062+00:00"}