{"schema_version":1,"title":"Rustdesk vulnerabilities","summary":"Junglewise Threat Intelligence has tracked 11 vulnerabilities in Rustdesk: 1 in the last 7 days and 5 in the last 90 days, 3 of them critical and 0 exploited in the wild. The most recent, CVE-2026-100388, was published on 25 September 2026.","url":"https://junglewise.ai/threats/technologies/rustdesk","json_url":"https://junglewise.ai/threats/technologies/rustdesk.json","publisher":"Junglewise Threat Intelligence","license":"CC-BY-4.0","license_url":"https://creativecommons.org/licenses/by/4.0/","attribution":"Junglewise Threat Intelligence, https://junglewise.ai/threats/technologies/rustdesk","sources":"NVD, GitHub Security Advisories, OSV, the CISA Known Exploited Vulnerabilities catalog, FIRST EPSS and vendor advisories","kind":"technology","counts":{"high":6,"all_time":11,"critical":3,"exploited":0,"last_7_days":1,"last_30_days":1,"last_90_days":5,"last_365_days":11},"latest":[{"cve":"CVE-2026-100388","cvss":5.4,"slug":"cve-2026-100388-rustdesk-versions-before-1-5-0-fail-to-properly-validate-file","title":"RustDesk file transfer permission bypass in Cliprdr handler","severity":"medium","exploited":false,"published_at":"2026-09-25T21:17:22.317+00:00","url":"https://junglewise.ai/threats/cve-2026-100388-rustdesk-versions-before-1-5-0-fail-to-properly-validate-file"},{"cve":"CVE-2026-73108","cvss":7.5,"epss":0.0077,"slug":"cve-2026-73108-rustdesk-uncontrolled-memory-allocation-in-bytescodec","title":"RustDesk uncontrolled memory allocation in BytesCodec","severity":"high","exploited":false,"published_at":"2026-08-26T14:17:12.83+00:00","url":"https://junglewise.ai/threats/cve-2026-73108-rustdesk-uncontrolled-memory-allocation-in-bytescodec"},{"cve":"CVE-2026-73102","cvss":5.7,"epss":0.0039,"slug":"cve-2026-73102-rustdesk-path-traversal-in-macos-clipboard-file-paste","title":"RustDesk path traversal in macOS clipboard file-paste","severity":"medium","exploited":false,"published_at":"2026-08-26T14:17:12.667+00:00","url":"https://junglewise.ai/threats/cve-2026-73102-rustdesk-path-traversal-in-macos-clipboard-file-paste"},{"cve":"CVE-2026-76840","cvss":9.6,"epss":0.0043,"slug":"cve-2026-76840-rustdesk-windows-clipboard-redirection-buffer-overflow","title":"RustDesk Windows clipboard redirection buffer overflow","severity":"critical","exploited":false,"published_at":"2026-08-24T14:17:01.55+00:00","url":"https://junglewise.ai/threats/cve-2026-76840-rustdesk-windows-clipboard-redirection-buffer-overflow"},{"cve":"CVE-2026-57850","cvss":8.3,"slug":"cve-2026-57850-rustdesk-missing-authorization-in-session-scope-enforcement","title":"RustDesk missing authorization in session scope enforcement","severity":"high","exploited":false,"published_at":"2026-07-10T20:16:48.663+00:00","url":"https://junglewise.ai/threats/cve-2026-57850-rustdesk-missing-authorization-in-session-scope-enforcement"},{"cve":"CVE-2026-58056","cvss":7.6,"slug":"cve-2026-58056-rustdesk-authorization-bypass-in-filetransfer-session","title":"RustDesk authorization bypass in FileTransfer session","severity":"high","exploited":false,"published_at":"2026-06-28T02:16:32.86+00:00","url":"https://junglewise.ai/threats/cve-2026-58056-rustdesk-authorization-bypass-in-filetransfer-session"},{"cve":"CVE-2026-30798","cvss":7.5,"epss":0.0029,"slug":"cve-2026-30798-rustdesk-client-remote-denial-of-service-in-heartbeat-loop","title":"RustDesk Client Remote Denial of Service in Heartbeat Loop","severity":"high","exploited":false,"published_at":"2026-03-05T16:16:21.333+00:00","url":"https://junglewise.ai/threats/cve-2026-30798-rustdesk-client-remote-denial-of-service-in-heartbeat-loop"},{"cve":"CVE-2026-30794","cvss":8.1,"epss":0.0031,"slug":"cve-2026-30794-rustdesk-client-improper-certificate-validation-in-tls-transport","title":"RustDesk Client improper certificate validation in TLS transport modules","severity":"high","exploited":false,"published_at":"2026-03-05T16:16:20.177+00:00","url":"https://junglewise.ai/threats/cve-2026-30794-rustdesk-client-improper-certificate-validation-in-tls-transport"},{"cve":"CVE-2026-30792","cvss":8.1,"epss":0.0049,"slug":"cve-2026-30792-rustdesk-client-remote-strategy-injection-via-man-in-the-middle","title":"RustDesk Client Remote Strategy Injection via Man-in-the-Middle","severity":"high","exploited":false,"published_at":"2026-03-05T16:16:19.84+00:00","url":"https://junglewise.ai/threats/cve-2026-30792-rustdesk-client-remote-strategy-injection-via-man-in-the-middle"},{"cve":"CVE-2026-30789","cvss":9.8,"epss":0.0042,"slug":"cve-2026-30789-rustdesk-client-authentication-bypass-via-session-replay-and-weak","title":"RustDesk Client authentication bypass via session replay and weak hashing","severity":"critical","exploited":false,"published_at":"2026-03-05T16:16:19.56+00:00","url":"https://junglewise.ai/threats/cve-2026-30789-rustdesk-client-authentication-bypass-via-session-replay-and-weak"},{"cve":"CVE-2026-30783","cvss":9.8,"epss":0.0059,"slug":"cve-2026-30783-rustdesk-client-privilege-abuse-via-unauthenticated-strategy","title":"RustDesk Client privilege abuse via unauthenticated strategy injection","severity":"critical","exploited":false,"published_at":"2026-03-05T16:16:18.91+00:00","url":"https://junglewise.ai/threats/cve-2026-30783-rustdesk-client-privilege-abuse-via-unauthenticated-strategy"}],"weekly":[{"week":"2026-06-29","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-07-06","critical":0,"exploited":0,"vulnerabilities":1},{"week":"2026-07-13","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-07-20","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-07-27","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-08-03","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-08-10","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-08-17","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-08-24","critical":1,"exploited":0,"vulnerabilities":3},{"week":"2026-08-31","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-09-07","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-09-14","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-09-21","critical":0,"exploited":0,"vulnerabilities":1}],"related":[{"name":"RustDesk Client","slug":"rustdesk-client","vulnerabilities":7,"url":"https://junglewise.ai/threats/technologies/rustdesk-client"},{"name":"RustDesk Server Pro","slug":"rustdesk-server-pro","vulnerabilities":3,"url":"https://junglewise.ai/threats/technologies/rustdesk-server-pro"}],"technology":{"hub":true,"name":"Rustdesk","slug":"rustdesk","vendor":{"name":"Rustdesk","slug":"rustdesk","url":"https://junglewise.ai/threats/vendors/rustdesk"},"aliases":[],"category":"application","homepage":"https://rustdesk.com/","repo_url":"https://github.com/rustdesk/rustdesk","description":"RustDesk is an open-source remote desktop software designed as a self-hosted alternative to TeamViewer.","url":"https://junglewise.ai/threats/technologies/rustdesk"},"most_severe":[{"cve":"CVE-2026-30783","cvss":9.8,"epss":0.0059,"slug":"cve-2026-30783-rustdesk-client-privilege-abuse-via-unauthenticated-strategy","title":"RustDesk Client privilege abuse via unauthenticated strategy injection","severity":"critical","exploited":false,"published_at":"2026-03-05T16:16:18.91+00:00","url":"https://junglewise.ai/threats/cve-2026-30783-rustdesk-client-privilege-abuse-via-unauthenticated-strategy"},{"cve":"CVE-2026-30789","cvss":9.8,"epss":0.0042,"slug":"cve-2026-30789-rustdesk-client-authentication-bypass-via-session-replay-and-weak","title":"RustDesk Client authentication bypass via session replay and weak hashing","severity":"critical","exploited":false,"published_at":"2026-03-05T16:16:19.56+00:00","url":"https://junglewise.ai/threats/cve-2026-30789-rustdesk-client-authentication-bypass-via-session-replay-and-weak"},{"cve":"CVE-2026-76840","cvss":9.6,"epss":0.0043,"slug":"cve-2026-76840-rustdesk-windows-clipboard-redirection-buffer-overflow","title":"RustDesk Windows clipboard redirection buffer overflow","severity":"critical","exploited":false,"published_at":"2026-08-24T14:17:01.55+00:00","url":"https://junglewise.ai/threats/cve-2026-76840-rustdesk-windows-clipboard-redirection-buffer-overflow"},{"cve":"CVE-2026-57850","cvss":8.3,"slug":"cve-2026-57850-rustdesk-missing-authorization-in-session-scope-enforcement","title":"RustDesk missing authorization in session scope enforcement","severity":"high","exploited":false,"published_at":"2026-07-10T20:16:48.663+00:00","url":"https://junglewise.ai/threats/cve-2026-57850-rustdesk-missing-authorization-in-session-scope-enforcement"},{"cve":"CVE-2026-30792","cvss":8.1,"epss":0.0049,"slug":"cve-2026-30792-rustdesk-client-remote-strategy-injection-via-man-in-the-middle","title":"RustDesk Client Remote Strategy Injection via Man-in-the-Middle","severity":"high","exploited":false,"published_at":"2026-03-05T16:16:19.84+00:00","url":"https://junglewise.ai/threats/cve-2026-30792-rustdesk-client-remote-strategy-injection-via-man-in-the-middle"},{"cve":"CVE-2026-30794","cvss":8.1,"epss":0.0031,"slug":"cve-2026-30794-rustdesk-client-improper-certificate-validation-in-tls-transport","title":"RustDesk Client improper certificate validation in TLS transport modules","severity":"high","exploited":false,"published_at":"2026-03-05T16:16:20.177+00:00","url":"https://junglewise.ai/threats/cve-2026-30794-rustdesk-client-improper-certificate-validation-in-tls-transport"},{"cve":"CVE-2026-58056","cvss":7.6,"slug":"cve-2026-58056-rustdesk-authorization-bypass-in-filetransfer-session","title":"RustDesk authorization bypass in FileTransfer session","severity":"high","exploited":false,"published_at":"2026-06-28T02:16:32.86+00:00","url":"https://junglewise.ai/threats/cve-2026-58056-rustdesk-authorization-bypass-in-filetransfer-session"},{"cve":"CVE-2026-73108","cvss":7.5,"epss":0.0077,"slug":"cve-2026-73108-rustdesk-uncontrolled-memory-allocation-in-bytescodec","title":"RustDesk uncontrolled memory allocation in BytesCodec","severity":"high","exploited":false,"published_at":"2026-08-26T14:17:12.83+00:00","url":"https://junglewise.ai/threats/cve-2026-73108-rustdesk-uncontrolled-memory-allocation-in-bytescodec"},{"cve":"CVE-2026-30798","cvss":7.5,"epss":0.0029,"slug":"cve-2026-30798-rustdesk-client-remote-denial-of-service-in-heartbeat-loop","title":"RustDesk Client Remote Denial of Service in Heartbeat Loop","severity":"high","exploited":false,"published_at":"2026-03-05T16:16:21.333+00:00","url":"https://junglewise.ai/threats/cve-2026-30798-rustdesk-client-remote-denial-of-service-in-heartbeat-loop"},{"cve":"CVE-2026-73102","cvss":5.7,"epss":0.0039,"slug":"cve-2026-73102-rustdesk-path-traversal-in-macos-clipboard-file-paste","title":"RustDesk path traversal in macOS clipboard file-paste","severity":"medium","exploited":false,"published_at":"2026-08-26T14:17:12.667+00:00","url":"https://junglewise.ai/threats/cve-2026-73102-rustdesk-path-traversal-in-macos-clipboard-file-paste"}],"generated_at":"2026-09-26T11:07:00.153785+00:00"}