{"schema_version":1,"title":"Rustdesk vulnerabilities","summary":"Junglewise Threat Intelligence has tracked 14 vulnerabilities in Rustdesk: 1 in the last 7 days and 5 in the last 90 days, 4 of them critical and 0 exploited in the wild. The most recent, CVE-2026-100388, was published on 25 September 2026. 3 technologies have a page of their own.","url":"https://junglewise.ai/threats/vendors/rustdesk","json_url":"https://junglewise.ai/threats/vendors/rustdesk.json","publisher":"Junglewise Threat Intelligence","license":"CC-BY-4.0","license_url":"https://creativecommons.org/licenses/by/4.0/","attribution":"Junglewise Threat Intelligence, https://junglewise.ai/threats/vendors/rustdesk","sources":"NVD, GitHub Security Advisories, OSV, the CISA Known Exploited Vulnerabilities catalog, FIRST EPSS and vendor advisories","kind":"vendor","counts":{"high":7,"all_time":14,"critical":4,"exploited":0,"last_7_days":1,"last_30_days":1,"last_90_days":5,"last_365_days":14},"latest":[{"cve":"CVE-2026-100388","cvss":5.4,"slug":"cve-2026-100388-rustdesk-versions-before-1-5-0-fail-to-properly-validate-file","title":"RustDesk file transfer permission bypass in Cliprdr handler","severity":"medium","exploited":false,"published_at":"2026-09-25T21:17:22.317+00:00","url":"https://junglewise.ai/threats/cve-2026-100388-rustdesk-versions-before-1-5-0-fail-to-properly-validate-file"},{"cve":"CVE-2026-73108","cvss":7.5,"epss":0.0077,"slug":"cve-2026-73108-rustdesk-uncontrolled-memory-allocation-in-bytescodec","title":"RustDesk uncontrolled memory allocation in BytesCodec","severity":"high","exploited":false,"published_at":"2026-08-26T14:17:12.83+00:00","url":"https://junglewise.ai/threats/cve-2026-73108-rustdesk-uncontrolled-memory-allocation-in-bytescodec"},{"cve":"CVE-2026-73102","cvss":5.7,"epss":0.0039,"slug":"cve-2026-73102-rustdesk-path-traversal-in-macos-clipboard-file-paste","title":"RustDesk path traversal in macOS clipboard file-paste","severity":"medium","exploited":false,"published_at":"2026-08-26T14:17:12.667+00:00","url":"https://junglewise.ai/threats/cve-2026-73102-rustdesk-path-traversal-in-macos-clipboard-file-paste"},{"cve":"CVE-2026-76840","cvss":9.6,"epss":0.0043,"slug":"cve-2026-76840-rustdesk-windows-clipboard-redirection-buffer-overflow","title":"RustDesk Windows clipboard redirection buffer overflow","severity":"critical","exploited":false,"published_at":"2026-08-24T14:17:01.55+00:00","url":"https://junglewise.ai/threats/cve-2026-76840-rustdesk-windows-clipboard-redirection-buffer-overflow"},{"cve":"CVE-2026-57850","cvss":8.3,"slug":"cve-2026-57850-rustdesk-missing-authorization-in-session-scope-enforcement","title":"RustDesk missing authorization in session scope enforcement","severity":"high","exploited":false,"published_at":"2026-07-10T20:16:48.663+00:00","url":"https://junglewise.ai/threats/cve-2026-57850-rustdesk-missing-authorization-in-session-scope-enforcement"},{"cve":"CVE-2026-58056","cvss":7.6,"slug":"cve-2026-58056-rustdesk-authorization-bypass-in-filetransfer-session","title":"RustDesk authorization bypass in FileTransfer session","severity":"high","exploited":false,"published_at":"2026-06-28T02:16:32.86+00:00","url":"https://junglewise.ai/threats/cve-2026-58056-rustdesk-authorization-bypass-in-filetransfer-session"},{"cve":"CVE-2026-30798","cvss":7.5,"epss":0.0029,"slug":"cve-2026-30798-rustdesk-client-remote-denial-of-service-in-heartbeat-loop","title":"RustDesk Client Remote Denial of Service in Heartbeat Loop","severity":"high","exploited":false,"published_at":"2026-03-05T16:16:21.333+00:00","url":"https://junglewise.ai/threats/cve-2026-30798-rustdesk-client-remote-denial-of-service-in-heartbeat-loop"},{"cve":"CVE-2026-30796","cvss":7.5,"epss":0.0028,"slug":"cve-2026-30796-rustdesk-client-plaintext-credential-disclosure-in-heartbeat-sync","title":"RustDesk Client plaintext credential disclosure in heartbeat sync","severity":"high","exploited":false,"published_at":"2026-03-05T16:16:21.007+00:00","url":"https://junglewise.ai/threats/cve-2026-30796-rustdesk-client-plaintext-credential-disclosure-in-heartbeat-sync"},{"cve":"CVE-2026-30794","cvss":8.1,"epss":0.0031,"slug":"cve-2026-30794-rustdesk-client-improper-certificate-validation-in-tls-transport","title":"RustDesk Client improper certificate validation in TLS transport modules","severity":"high","exploited":false,"published_at":"2026-03-05T16:16:20.177+00:00","url":"https://junglewise.ai/threats/cve-2026-30794-rustdesk-client-improper-certificate-validation-in-tls-transport"},{"cve":"CVE-2026-30792","cvss":8.1,"epss":0.0049,"slug":"cve-2026-30792-rustdesk-client-remote-strategy-injection-via-man-in-the-middle","title":"RustDesk Client Remote Strategy Injection via Man-in-the-Middle","severity":"high","exploited":false,"published_at":"2026-03-05T16:16:19.84+00:00","url":"https://junglewise.ai/threats/cve-2026-30792-rustdesk-client-remote-strategy-injection-via-man-in-the-middle"},{"cve":"CVE-2026-30790","cvss":9.8,"epss":0.004,"slug":"cve-2026-30790-rustdesk-client-and-server-weak-password-hashing-and-credential","title":"RustDesk Client and Server weak password hashing and credential exposure","severity":"critical","exploited":false,"published_at":"2026-03-05T16:16:19.703+00:00","url":"https://junglewise.ai/threats/cve-2026-30790-rustdesk-client-and-server-weak-password-hashing-and-credential"},{"cve":"CVE-2026-30789","cvss":9.8,"epss":0.0042,"slug":"cve-2026-30789-rustdesk-client-authentication-bypass-via-session-replay-and-weak","title":"RustDesk Client authentication bypass via session replay and weak hashing","severity":"critical","exploited":false,"published_at":"2026-03-05T16:16:19.56+00:00","url":"https://junglewise.ai/threats/cve-2026-30789-rustdesk-client-authentication-bypass-via-session-replay-and-weak"},{"cve":"CVE-2026-30784","cvss":9.8,"epss":0.0065,"slug":"cve-2026-30784-rustdesk-server-authentication-bypass-in-hbbs-and-hbbr-modules","title":"RustDesk Server authentication bypass in hbbs and hbbr modules","severity":"info","exploited":false,"published_at":"2026-03-05T16:16:19.11+00:00","url":"https://junglewise.ai/threats/cve-2026-30784-rustdesk-server-authentication-bypass-in-hbbs-and-hbbr-modules"},{"cve":"CVE-2026-30783","cvss":9.8,"epss":0.0059,"slug":"cve-2026-30783-rustdesk-client-privilege-abuse-via-unauthenticated-strategy","title":"RustDesk Client privilege abuse via unauthenticated strategy injection","severity":"critical","exploited":false,"published_at":"2026-03-05T16:16:18.91+00:00","url":"https://junglewise.ai/threats/cve-2026-30783-rustdesk-client-privilege-abuse-via-unauthenticated-strategy"}],"vendor":{"hub":true,"name":"Rustdesk","slug":"rustdesk","homepage":"https://rustdesk.com/","description":"Developer of remote desktop software.","url":"https://junglewise.ai/threats/vendors/rustdesk"},"weekly":[{"week":"2026-06-29","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-07-06","critical":0,"exploited":0,"vulnerabilities":1},{"week":"2026-07-13","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-07-20","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-07-27","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-08-03","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-08-10","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-08-17","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-08-24","critical":1,"exploited":0,"vulnerabilities":3},{"week":"2026-08-31","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-09-07","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-09-14","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-09-21","critical":0,"exploited":0,"vulnerabilities":1}],"most_severe":[{"cve":"CVE-2026-30783","cvss":9.8,"epss":0.0059,"slug":"cve-2026-30783-rustdesk-client-privilege-abuse-via-unauthenticated-strategy","title":"RustDesk Client privilege abuse via unauthenticated strategy injection","severity":"critical","exploited":false,"published_at":"2026-03-05T16:16:18.91+00:00","url":"https://junglewise.ai/threats/cve-2026-30783-rustdesk-client-privilege-abuse-via-unauthenticated-strategy"},{"cve":"CVE-2026-30789","cvss":9.8,"epss":0.0042,"slug":"cve-2026-30789-rustdesk-client-authentication-bypass-via-session-replay-and-weak","title":"RustDesk Client authentication bypass via session replay and weak hashing","severity":"critical","exploited":false,"published_at":"2026-03-05T16:16:19.56+00:00","url":"https://junglewise.ai/threats/cve-2026-30789-rustdesk-client-authentication-bypass-via-session-replay-and-weak"},{"cve":"CVE-2026-30790","cvss":9.8,"epss":0.004,"slug":"cve-2026-30790-rustdesk-client-and-server-weak-password-hashing-and-credential","title":"RustDesk Client and Server weak password hashing and credential exposure","severity":"critical","exploited":false,"published_at":"2026-03-05T16:16:19.703+00:00","url":"https://junglewise.ai/threats/cve-2026-30790-rustdesk-client-and-server-weak-password-hashing-and-credential"},{"cve":"CVE-2026-76840","cvss":9.6,"epss":0.0043,"slug":"cve-2026-76840-rustdesk-windows-clipboard-redirection-buffer-overflow","title":"RustDesk Windows clipboard redirection buffer overflow","severity":"critical","exploited":false,"published_at":"2026-08-24T14:17:01.55+00:00","url":"https://junglewise.ai/threats/cve-2026-76840-rustdesk-windows-clipboard-redirection-buffer-overflow"},{"cve":"CVE-2026-57850","cvss":8.3,"slug":"cve-2026-57850-rustdesk-missing-authorization-in-session-scope-enforcement","title":"RustDesk missing authorization in session scope enforcement","severity":"high","exploited":false,"published_at":"2026-07-10T20:16:48.663+00:00","url":"https://junglewise.ai/threats/cve-2026-57850-rustdesk-missing-authorization-in-session-scope-enforcement"},{"cve":"CVE-2026-30792","cvss":8.1,"epss":0.0049,"slug":"cve-2026-30792-rustdesk-client-remote-strategy-injection-via-man-in-the-middle","title":"RustDesk Client Remote Strategy Injection via Man-in-the-Middle","severity":"high","exploited":false,"published_at":"2026-03-05T16:16:19.84+00:00","url":"https://junglewise.ai/threats/cve-2026-30792-rustdesk-client-remote-strategy-injection-via-man-in-the-middle"},{"cve":"CVE-2026-30794","cvss":8.1,"epss":0.0031,"slug":"cve-2026-30794-rustdesk-client-improper-certificate-validation-in-tls-transport","title":"RustDesk Client improper certificate validation in TLS transport modules","severity":"high","exploited":false,"published_at":"2026-03-05T16:16:20.177+00:00","url":"https://junglewise.ai/threats/cve-2026-30794-rustdesk-client-improper-certificate-validation-in-tls-transport"},{"cve":"CVE-2026-58056","cvss":7.6,"slug":"cve-2026-58056-rustdesk-authorization-bypass-in-filetransfer-session","title":"RustDesk authorization bypass in FileTransfer session","severity":"high","exploited":false,"published_at":"2026-06-28T02:16:32.86+00:00","url":"https://junglewise.ai/threats/cve-2026-58056-rustdesk-authorization-bypass-in-filetransfer-session"},{"cve":"CVE-2026-73108","cvss":7.5,"epss":0.0077,"slug":"cve-2026-73108-rustdesk-uncontrolled-memory-allocation-in-bytescodec","title":"RustDesk uncontrolled memory allocation in BytesCodec","severity":"high","exploited":false,"published_at":"2026-08-26T14:17:12.83+00:00","url":"https://junglewise.ai/threats/cve-2026-73108-rustdesk-uncontrolled-memory-allocation-in-bytescodec"},{"cve":"CVE-2026-30798","cvss":7.5,"epss":0.0029,"slug":"cve-2026-30798-rustdesk-client-remote-denial-of-service-in-heartbeat-loop","title":"RustDesk Client Remote Denial of Service in Heartbeat Loop","severity":"high","exploited":false,"published_at":"2026-03-05T16:16:21.333+00:00","url":"https://junglewise.ai/threats/cve-2026-30798-rustdesk-client-remote-denial-of-service-in-heartbeat-loop"}],"generated_at":"2026-09-26T11:07:00.153785+00:00","technologies":[{"name":"Rustdesk","slug":"rustdesk","vulnerabilities":10,"url":"https://junglewise.ai/threats/technologies/rustdesk"},{"name":"RustDesk Client","slug":"rustdesk-client","vulnerabilities":7,"url":"https://junglewise.ai/threats/technologies/rustdesk-client"},{"name":"RustDesk Server Pro","slug":"rustdesk-server-pro","vulnerabilities":3,"url":"https://junglewise.ai/threats/technologies/rustdesk-server-pro"}]}