{"schema_version":1,"title":"Samba Rsync vulnerabilities","summary":"Junglewise Threat Intelligence has tracked 17 vulnerabilities in Samba Rsync: 0 in the last 7 days and 0 in the last 90 days, 1 of them critical and 0 exploited in the wild. The most recent, CVE-2026-70463, was published on 13 August 2026.","url":"https://junglewise.ai/threats/technologies/samba-rsync","json_url":"https://junglewise.ai/threats/technologies/samba-rsync.json","publisher":"Junglewise Threat Intelligence","license":"CC-BY-4.0","license_url":"https://creativecommons.org/licenses/by/4.0/","attribution":"Junglewise Threat Intelligence, https://junglewise.ai/threats/technologies/samba-rsync","sources":"NVD, GitHub Security Advisories, OSV, the CISA Known Exploited Vulnerabilities catalog, FIRST EPSS and vendor advisories","kind":"technology","thin":true,"counts":{"high":7,"all_time":17,"critical":1,"exploited":0,"last_7_days":0,"last_30_days":0,"last_90_days":0,"last_365_days":17},"latest":[{"cve":"CVE-2026-70463","cvss":8.1,"epss":0.0036,"slug":"cve-2026-70463-rsync-3-1-0-before-3-5-0-contains-an-authorization-bypass-in-auth","title":"rsync 3.1.0 before 3.5.0 contains an authorization bypass in auth users directive parsing. The auth users parser uses…","severity":"high","exploited":false,"published_at":"2026-08-13T15:20:01.513+00:00","url":"https://junglewise.ai/threats/cve-2026-70463-rsync-3-1-0-before-3-5-0-contains-an-authorization-bypass-in-auth"},{"cve":"CVE-2026-70461","cvss":8.2,"epss":0.0057,"slug":"cve-2026-70461-rsync-3-2-5-before-3-5-0-contains-a-heap-out-of-bounds-write","title":"rsync 3.2.5 before 3.5.0 contains a heap out-of-bounds write vulnerability that allows remote unauthenticated…","severity":"high","exploited":false,"published_at":"2026-08-13T15:20:00.117+00:00","url":"https://junglewise.ai/threats/cve-2026-70461-rsync-3-2-5-before-3-5-0-contains-a-heap-out-of-bounds-write"},{"cve":"CVE-2026-70459","cvss":5.3,"epss":0.0072,"slug":"cve-2026-70459-rsync-3-0-0-before-3-5-0-contains-a-null-pointer-dereference","title":"rsync 3.0.0 before 3.5.0 contains a null pointer dereference vulnerability in the daemon child process that allows…","severity":"medium","exploited":false,"published_at":"2026-08-13T15:19:59.813+00:00","url":"https://junglewise.ai/threats/cve-2026-70459-rsync-3-0-0-before-3-5-0-contains-a-null-pointer-dereference"},{"cve":"CVE-2026-70457","cvss":6.5,"epss":0.0038,"slug":"cve-2026-70457-rsync-3-2-3-before-3-5-0-contains-an-out-of-bounds-write-in-parse","title":"rsync 3.2.3 before 3.5.0 contains an out-of-bounds write in parse_size_arg() where the return value of snprintf() is…","severity":"medium","exploited":false,"published_at":"2026-08-13T15:19:59.49+00:00","url":"https://junglewise.ai/threats/cve-2026-70457-rsync-3-2-3-before-3-5-0-contains-an-out-of-bounds-write-in-parse"},{"cve":"CVE-2026-70455","cvss":7.5,"epss":0.0057,"slug":"cve-2026-70455-rsync-3-4-2-before-3-5-0-contains-a-denial-of-service","title":"rsync 3.4.2 before 3.5.0 contains a denial of service vulnerability that allows a remote sender to exhaust system…","severity":"high","exploited":false,"published_at":"2026-08-13T15:19:59.197+00:00","url":"https://junglewise.ai/threats/cve-2026-70455-rsync-3-4-2-before-3-5-0-contains-a-denial-of-service"},{"cve":"CVE-2026-53803","cvss":7.8,"epss":0.0023,"slug":"cve-2026-53803-rsync-before-3-5-0-contains-a-symlink-following-vulnerability","title":"rsync before 3.5.0 contains a symlink following vulnerability that allows local attackers to overwrite arbitrary files…","severity":"high","exploited":false,"published_at":"2026-08-13T15:19:53.02+00:00","url":"https://junglewise.ai/threats/cve-2026-53803-rsync-before-3-5-0-contains-a-symlink-following-vulnerability"},{"cve":"CVE-2026-53802","cvss":7.1,"epss":0.0024,"slug":"cve-2026-53802-rsync-before-3-5-0-contains-an-arbitrary-file-read-vulnerability","title":"rsync before 3.5.0 contains an arbitrary file read vulnerability that allows attackers to read files accessible to the…","severity":"high","exploited":false,"published_at":"2026-08-13T15:19:52.85+00:00","url":"https://junglewise.ai/threats/cve-2026-53802-rsync-before-3-5-0-contains-an-arbitrary-file-read-vulnerability"},{"cve":"CVE-2026-53801","cvss":5.9,"epss":0.0029,"slug":"cve-2026-53801-rsync-before-3-5-0-contains-a-symlink-race-condition","title":"rsync before 3.5.0 contains a symlink race condition vulnerability in the sender's directory scanning logic that…","severity":"medium","exploited":false,"published_at":"2026-08-13T15:19:52.623+00:00","url":"https://junglewise.ai/threats/cve-2026-53801-rsync-before-3-5-0-contains-a-symlink-race-condition"},{"cve":"CVE-2026-53800","cvss":4.7,"epss":0.0014,"slug":"cve-2026-53800-rsync-before-3-5-0-contains-a-symlink-race-condition","title":"rsync before 3.5.0 contains a symlink race condition vulnerability in the --remove-source-files feature that allows…","severity":"medium","exploited":false,"published_at":"2026-08-13T15:19:52.3+00:00","url":"https://junglewise.ai/threats/cve-2026-53800-rsync-before-3-5-0-contains-a-symlink-race-condition"},{"cve":"CVE-2026-53799","cvss":6.3,"epss":0.0012,"slug":"cve-2026-53799-rsync-before-3-5-0-contains-a-symlink-race-condition","title":"rsync before 3.5.0 contains a symlink race condition vulnerability that allows local attackers to cause rsync to apply…","severity":"medium","exploited":false,"published_at":"2026-08-13T15:19:52.13+00:00","url":"https://junglewise.ai/threats/cve-2026-53799-rsync-before-3-5-0-contains-a-symlink-race-condition"},{"cve":"CVE-2026-53798","cvss":5.3,"epss":0.0043,"slug":"cve-2026-53798-rsync-before-3-5-0-contains-a-privilege-confusion-vulnerability","title":"rsync before 3.5.0 contains a privilege confusion vulnerability in the name-converter subprocess uid/gid mapping that…","severity":"medium","exploited":false,"published_at":"2026-08-13T15:19:51.947+00:00","url":"https://junglewise.ai/threats/cve-2026-53798-rsync-before-3-5-0-contains-a-privilege-confusion-vulnerability"},{"cve":"CVE-2026-53797","cvss":4.7,"epss":0.0014,"slug":"cve-2026-53797-rsync-before-3-5-0-contains-a-symlink-race-condition","title":"rsync before 3.5.0 contains a symlink race condition vulnerability in the sender's source tree traversal that allows…","severity":"medium","exploited":false,"published_at":"2026-08-13T15:19:51.75+00:00","url":"https://junglewise.ai/threats/cve-2026-53797-rsync-before-3-5-0-contains-a-symlink-race-condition"},{"cve":"CVE-2026-53795","cvss":8.1,"epss":0.004,"slug":"cve-2026-53795-rsync-before-3-5-0-contains-an-arbitrary-file-write-vulnerability","title":"rsync before 3.5.0 contains an arbitrary file write vulnerability that allows attackers to write files outside the…","severity":"high","exploited":false,"published_at":"2026-08-13T15:19:44.117+00:00","url":"https://junglewise.ai/threats/cve-2026-53795-rsync-before-3-5-0-contains-an-arbitrary-file-write-vulnerability"},{"cve":"CVE-2026-53791","cvss":9.1,"epss":0.005,"slug":"cve-2026-53791-rsync-daemon-before-3-5-0-contains-an-ip-address-spoofing","title":"rsync daemon before 3.5.0 contains an IP address spoofing vulnerability that allows unauthenticated remote attackers…","severity":"critical","exploited":false,"published_at":"2026-08-13T15:19:43.363+00:00","url":"https://junglewise.ai/threats/cve-2026-53791-rsync-daemon-before-3-5-0-contains-an-ip-address-spoofing"},{"cve":"CVE-2026-53789","cvss":6.5,"epss":0.0036,"slug":"cve-2026-53789-rsync-before-3-5-0-contains-an-improper-path-handling","title":"rsync before 3.5.0 contains an improper path handling vulnerability that allows a malicious sender to expand the scope…","severity":"medium","exploited":false,"published_at":"2026-08-13T15:19:43.03+00:00","url":"https://junglewise.ai/threats/cve-2026-53789-rsync-before-3-5-0-contains-an-improper-path-handling"},{"cve":"CVE-2026-53786","cvss":6.5,"epss":0.004,"slug":"cve-2026-53786-rsync-before-3-5-0-contains-a-filter-rule-bypass-vulnerability","title":"rsync before 3.5.0 contains a filter rule bypass vulnerability that allows authenticated clients to override…","severity":"medium","exploited":false,"published_at":"2026-08-13T15:19:42.7+00:00","url":"https://junglewise.ai/threats/cve-2026-53786-rsync-before-3-5-0-contains-a-filter-rule-bypass-vulnerability"},{"cve":"CVE-2026-53784","cvss":7.1,"epss":0.0024,"slug":"cve-2026-53784-rsync-before-3-5-0-contains-a-path-traversal-vulnerability-that","title":"rsync before 3.5.0 contains a path traversal vulnerability that allows remote clients to access files outside the…","severity":"high","exploited":false,"published_at":"2026-08-13T15:19:42.19+00:00","url":"https://junglewise.ai/threats/cve-2026-53784-rsync-before-3-5-0-contains-a-path-traversal-vulnerability-that"}],"weekly":[{"week":"2026-08-17","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-08-24","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-08-31","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-09-07","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-09-14","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-09-21","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-09-28","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-10-05","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-10-12","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-10-19","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-10-26","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-11-02","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-11-09","critical":0,"exploited":0,"vulnerabilities":0}],"related":[{"name":"Samba","slug":"samba","vulnerabilities":16,"url":"https://junglewise.ai/threats/technologies/samba"}],"technology":{"hub":true,"name":"Samba Rsync","slug":"samba-rsync","vendor":{"hub":true,"name":"Samba","slug":"samba","url":"https://junglewise.ai/threats/vendors/samba"},"aliases":[],"description":"Utility for efficiently transferring and synchronizing files between systems over a network or locally.","url":"https://junglewise.ai/threats/technologies/samba-rsync"},"most_severe":[{"cve":"CVE-2026-53791","cvss":9.1,"epss":0.005,"slug":"cve-2026-53791-rsync-daemon-before-3-5-0-contains-an-ip-address-spoofing","title":"rsync daemon before 3.5.0 contains an IP address spoofing vulnerability that allows unauthenticated remote attackers…","severity":"critical","exploited":false,"published_at":"2026-08-13T15:19:43.363+00:00","url":"https://junglewise.ai/threats/cve-2026-53791-rsync-daemon-before-3-5-0-contains-an-ip-address-spoofing"},{"cve":"CVE-2026-70461","cvss":8.2,"epss":0.0057,"slug":"cve-2026-70461-rsync-3-2-5-before-3-5-0-contains-a-heap-out-of-bounds-write","title":"rsync 3.2.5 before 3.5.0 contains a heap out-of-bounds write vulnerability that allows remote unauthenticated…","severity":"high","exploited":false,"published_at":"2026-08-13T15:20:00.117+00:00","url":"https://junglewise.ai/threats/cve-2026-70461-rsync-3-2-5-before-3-5-0-contains-a-heap-out-of-bounds-write"},{"cve":"CVE-2026-53795","cvss":8.1,"epss":0.004,"slug":"cve-2026-53795-rsync-before-3-5-0-contains-an-arbitrary-file-write-vulnerability","title":"rsync before 3.5.0 contains an arbitrary file write vulnerability that allows attackers to write files outside the…","severity":"high","exploited":false,"published_at":"2026-08-13T15:19:44.117+00:00","url":"https://junglewise.ai/threats/cve-2026-53795-rsync-before-3-5-0-contains-an-arbitrary-file-write-vulnerability"},{"cve":"CVE-2026-70463","cvss":8.1,"epss":0.0036,"slug":"cve-2026-70463-rsync-3-1-0-before-3-5-0-contains-an-authorization-bypass-in-auth","title":"rsync 3.1.0 before 3.5.0 contains an authorization bypass in auth users directive parsing. The auth users parser uses…","severity":"high","exploited":false,"published_at":"2026-08-13T15:20:01.513+00:00","url":"https://junglewise.ai/threats/cve-2026-70463-rsync-3-1-0-before-3-5-0-contains-an-authorization-bypass-in-auth"},{"cve":"CVE-2026-53803","cvss":7.8,"epss":0.0023,"slug":"cve-2026-53803-rsync-before-3-5-0-contains-a-symlink-following-vulnerability","title":"rsync before 3.5.0 contains a symlink following vulnerability that allows local attackers to overwrite arbitrary files…","severity":"high","exploited":false,"published_at":"2026-08-13T15:19:53.02+00:00","url":"https://junglewise.ai/threats/cve-2026-53803-rsync-before-3-5-0-contains-a-symlink-following-vulnerability"},{"cve":"CVE-2026-70455","cvss":7.5,"epss":0.0057,"slug":"cve-2026-70455-rsync-3-4-2-before-3-5-0-contains-a-denial-of-service","title":"rsync 3.4.2 before 3.5.0 contains a denial of service vulnerability that allows a remote sender to exhaust system…","severity":"high","exploited":false,"published_at":"2026-08-13T15:19:59.197+00:00","url":"https://junglewise.ai/threats/cve-2026-70455-rsync-3-4-2-before-3-5-0-contains-a-denial-of-service"},{"cve":"CVE-2026-53802","cvss":7.1,"epss":0.0024,"slug":"cve-2026-53802-rsync-before-3-5-0-contains-an-arbitrary-file-read-vulnerability","title":"rsync before 3.5.0 contains an arbitrary file read vulnerability that allows attackers to read files accessible to the…","severity":"high","exploited":false,"published_at":"2026-08-13T15:19:52.85+00:00","url":"https://junglewise.ai/threats/cve-2026-53802-rsync-before-3-5-0-contains-an-arbitrary-file-read-vulnerability"},{"cve":"CVE-2026-53784","cvss":7.1,"epss":0.0024,"slug":"cve-2026-53784-rsync-before-3-5-0-contains-a-path-traversal-vulnerability-that","title":"rsync before 3.5.0 contains a path traversal vulnerability that allows remote clients to access files outside the…","severity":"high","exploited":false,"published_at":"2026-08-13T15:19:42.19+00:00","url":"https://junglewise.ai/threats/cve-2026-53784-rsync-before-3-5-0-contains-a-path-traversal-vulnerability-that"},{"cve":"CVE-2026-53786","cvss":6.5,"epss":0.004,"slug":"cve-2026-53786-rsync-before-3-5-0-contains-a-filter-rule-bypass-vulnerability","title":"rsync before 3.5.0 contains a filter rule bypass vulnerability that allows authenticated clients to override…","severity":"medium","exploited":false,"published_at":"2026-08-13T15:19:42.7+00:00","url":"https://junglewise.ai/threats/cve-2026-53786-rsync-before-3-5-0-contains-a-filter-rule-bypass-vulnerability"},{"cve":"CVE-2026-70457","cvss":6.5,"epss":0.0038,"slug":"cve-2026-70457-rsync-3-2-3-before-3-5-0-contains-an-out-of-bounds-write-in-parse","title":"rsync 3.2.3 before 3.5.0 contains an out-of-bounds write in parse_size_arg() where the return value of snprintf() is…","severity":"medium","exploited":false,"published_at":"2026-08-13T15:19:59.49+00:00","url":"https://junglewise.ai/threats/cve-2026-70457-rsync-3-2-3-before-3-5-0-contains-an-out-of-bounds-write-in-parse"}],"generated_at":"2026-11-12T03:07:00.164048+00:00"}