Technology · Samba
Samba Rsync vulnerabilities
Updated . Rebuilt every hour.
Junglewise Threat Intelligence has tracked 17 vulnerabilities in Samba Rsync: 0 in the last 7 days and 0 in the last 90 days, 1 of them critical and 0 exploited in the wild. The most recent, CVE-2026-70463, was published on 13 August 2026.
- Last 7 days
- 0
- Last 90 days
- 0
- Critical, all time
- 1
- Exploited in the wild
- 0
About Samba Rsync
Utility for efficiently transferring and synchronizing files between systems over a network or locally.
Latest Samba Rsync vulnerabilities
- CVE-2026-70463: rsync 3.1.0 before 3.5.0 contains an authorization bypass in auth users directive parsing. The auth users parser uses…highCVSS 8.1EPSS 0.4%
- CVE-2026-70461: rsync 3.2.5 before 3.5.0 contains a heap out-of-bounds write vulnerability that allows remote unauthenticated…highCVSS 8.2EPSS 0.6%
- CVE-2026-70459: rsync 3.0.0 before 3.5.0 contains a null pointer dereference vulnerability in the daemon child process that allows…mediumCVSS 5.3EPSS 0.7%
- CVE-2026-70457: rsync 3.2.3 before 3.5.0 contains an out-of-bounds write in parse_size_arg() where the return value of snprintf() is…mediumCVSS 6.5EPSS 0.4%
- CVE-2026-70455: rsync 3.4.2 before 3.5.0 contains a denial of service vulnerability that allows a remote sender to exhaust system…highCVSS 7.5EPSS 0.6%
- CVE-2026-53803: rsync before 3.5.0 contains a symlink following vulnerability that allows local attackers to overwrite arbitrary files…highCVSS 7.8EPSS 0.2%
- CVE-2026-53802: rsync before 3.5.0 contains an arbitrary file read vulnerability that allows attackers to read files accessible to the…highCVSS 7.1EPSS 0.2%
- CVE-2026-53801: rsync before 3.5.0 contains a symlink race condition vulnerability in the sender's directory scanning logic that…mediumCVSS 5.9EPSS 0.3%
- CVE-2026-53800: rsync before 3.5.0 contains a symlink race condition vulnerability in the --remove-source-files feature that allows…mediumCVSS 4.7EPSS 0.1%
- CVE-2026-53799: rsync before 3.5.0 contains a symlink race condition vulnerability that allows local attackers to cause rsync to apply…mediumCVSS 6.3EPSS 0.1%
- CVE-2026-53798: rsync before 3.5.0 contains a privilege confusion vulnerability in the name-converter subprocess uid/gid mapping that…mediumCVSS 5.3EPSS 0.4%
- CVE-2026-53797: rsync before 3.5.0 contains a symlink race condition vulnerability in the sender's source tree traversal that allows…mediumCVSS 4.7EPSS 0.1%
- CVE-2026-53795: rsync before 3.5.0 contains an arbitrary file write vulnerability that allows attackers to write files outside the…highCVSS 8.1EPSS 0.4%
- CVE-2026-53791: rsync daemon before 3.5.0 contains an IP address spoofing vulnerability that allows unauthenticated remote attackers…criticalCVSS 9.1EPSS 0.5%
- CVE-2026-53789: rsync before 3.5.0 contains an improper path handling vulnerability that allows a malicious sender to expand the scope…mediumCVSS 6.5EPSS 0.4%
- CVE-2026-53786: rsync before 3.5.0 contains a filter rule bypass vulnerability that allows authenticated clients to override…mediumCVSS 6.5EPSS 0.4%
- CVE-2026-53784: rsync before 3.5.0 contains a path traversal vulnerability that allows remote clients to access files outside the…highCVSS 7.1EPSS 0.2%
Most severe Samba Rsync vulnerabilities
Exploited in the wild first, then by severity and CVSS score.
- CVE-2026-53791: rsync daemon before 3.5.0 contains an IP address spoofing vulnerability that allows unauthenticated remote attackers…criticalCVSS 9.1EPSS 0.5%
- CVE-2026-70461: rsync 3.2.5 before 3.5.0 contains a heap out-of-bounds write vulnerability that allows remote unauthenticated…highCVSS 8.2EPSS 0.6%
- CVE-2026-53795: rsync before 3.5.0 contains an arbitrary file write vulnerability that allows attackers to write files outside the…highCVSS 8.1EPSS 0.4%
- CVE-2026-70463: rsync 3.1.0 before 3.5.0 contains an authorization bypass in auth users directive parsing. The auth users parser uses…highCVSS 8.1EPSS 0.4%
- CVE-2026-53803: rsync before 3.5.0 contains a symlink following vulnerability that allows local attackers to overwrite arbitrary files…highCVSS 7.8EPSS 0.2%
- CVE-2026-70455: rsync 3.4.2 before 3.5.0 contains a denial of service vulnerability that allows a remote sender to exhaust system…highCVSS 7.5EPSS 0.6%
- CVE-2026-53802: rsync before 3.5.0 contains an arbitrary file read vulnerability that allows attackers to read files accessible to the…highCVSS 7.1EPSS 0.2%
- CVE-2026-53784: rsync before 3.5.0 contains a path traversal vulnerability that allows remote clients to access files outside the…highCVSS 7.1EPSS 0.2%
- CVE-2026-53786: rsync before 3.5.0 contains a filter rule bypass vulnerability that allows authenticated clients to override…mediumCVSS 6.5EPSS 0.4%
- CVE-2026-70457: rsync 3.2.3 before 3.5.0 contains an out-of-bounds write in parse_size_arg() where the return value of snprintf() is…mediumCVSS 6.5EPSS 0.4%
Vulnerabilities per week
Nothing was published in the last eight weeks. The last 13 weeks, by the week each vulnerability was published.
| Week of | Bar | Vulns | Critical |
|---|---|---|---|
| 17 Aug 2026 | 0 | 0 | |
| 24 Aug 2026 | 0 | 0 | |
| 31 Aug 2026 | 0 | 0 | |
| 7 Sep 2026 | 0 | 0 | |
| 14 Sep 2026 | 0 | 0 | |
| 21 Sep 2026 | 0 | 0 | |
| 28 Sep 2026 | 0 | 0 | |
| 5 Oct 2026 | 0 | 0 | |
| 12 Oct 2026 | 0 | 0 | |
| 19 Oct 2026 | 0 | 0 | |
| 26 Oct 2026 | 0 | 0 | |
| 2 Nov 2026 | 0 | 0 | |
| 9 Nov 2026 | 0 | 0 |
Embed a badge
A live badge for a README, a status page or an internal wiki: how many Samba Rsync vulnerabilities were published in the last 7 days and how many of them are critical, refreshed hourly.
[](https://junglewise.ai/threats/technologies/samba-rsync)<a href="https://junglewise.ai/threats/technologies/samba-rsync"><img src="https://junglewise.ai/threats/technologies/samba-rsync/badge.svg" alt="Samba Rsync vulnerabilities" /></a>How this is built
Junglewise Threat Intelligence collects vulnerabilities from NVD, GitHub Security Advisories, OSV, the CISA Known Exploited Vulnerabilities catalog, FIRST EPSS and vendor advisories, and matches each one to the technologies and vendors it affects. Dates are the date a vulnerability was published, in UTC.
The pages are rebuilt from the database every hour. Frozen weekly and monthly reports never change once published, so they can be cited.
Use this data
The same data is at https://junglewise.ai/threats/technologies/samba-rsync.json, and this page as text at https://junglewise.ai/threats/technologies/samba-rsync.md, for scripts and language models. It is free to reuse under CC BY 4.0 with a link back to this page.
Cite as: Junglewise Threat Intelligence, "Samba Rsync vulnerabilities", https://junglewise.ai/threats/technologies/samba-rsync, 12 November 2026.