Known vulnerabilities in Rsync 3.4.4

Vendor: Samba
Software: Rsync
Version: 3.4.4
Software CPE: cpe:2.3:a:samba:rsync:*:*:*:*:*:*:*:*
Total vulnerabilities: 33
Public exploits: 0
Known exploited (KEV): 0
Highest CVSSv4 Score: 9.3

Vulnerabilities by Severity

Severity distribution of vulnerabilities affecting Rsync version 3.4.4 Rsync 3.4.4 is affected by 33 vulnerabilities: 7 high, 18 medium, 8 low Critical High Medium Low

Vulnerabilities (33)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU142298 - UNIX Symbolic Link (Symlink) Following
CVE-2026-53802
CWE-61 Low
No
No
3.5.0 13.08.2026 SB2026081362
SB2026081821
SB2026082074
and 2 more
#VU142297 - Improper Link Resolution Before File Access ('Link Following')
CVE-2026-53803
CWE-59 Low
No
No
3.5.0 13.08.2026 SB2026081362
SB2026081821
SB2026082074
and 2 more
#VU142296 - Improper Link Resolution Before File Access ('Link Following')
CVE-2026-53783
CWE-59 Medium
No
No
3.5.0 13.08.2026 SB2026081362
SB2026081821
SB2026082074
and 2 more
#VU142295 - Improper Link Resolution Before File Access ('Link Following')
CVE-2026-53784
CWE-59 Low
No
No
3.5.0 13.08.2026 SB2026081362
SB2026081821
SB2026082074
and 2 more
#VU142294 - Improper Link Resolution Before File Access ('Link Following')
CVE-2026-53785
CWE-59 Low
No
No
3.5.0 13.08.2026 SB2026081362
SB2026081821
SB2026082074
and 2 more
#VU142293 - Improper Access Control
CVE-2026-53786
CWE-284 Medium
No
No
3.5.0 13.08.2026 SB2026081362
SB2026081821
SB2026082074
and 2 more
#VU142292 - Improper input validation
CVE-2026-53798
CWE-20 Medium
No
No
3.5.0 13.08.2026 SB2026081362
SB2026081821
SB2026082074
and 2 more
#VU142291 - Improper Neutralization of Special Elements in Output Used by a Downstream Component ('Injection')
CVE-2026-53788
CWE-74 Medium
No
No
3.5.0 13.08.2026 SB2026081362
SB2026081821
SB2026082074
and 2 more
#VU142290 - Improper input validation
CVE-2026-53789
CWE-20 Medium
No
No
3.5.0 13.08.2026 SB2026081362
SB2026081821
SB2026082074
and 2 more
#VU142289 - Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')
CVE-2026-53790
CWE-78 High
No
No
3.5.0 13.08.2026 SB2026081362
SB2026081821
SB2026082074
and 2 more
#VU142288 - Authentication Bypass by Spoofing
CVE-2026-53791
CWE-290 High
No
No
3.5.0 13.08.2026 SB2026081362
SB2026081821
SB2026082074
and 2 more
#VU142287 - Improper Validation of Array Index
CVE-2026-53792
CWE-129 Medium
No
No
3.5.0 13.08.2026 SB2026081362
SB2026081821
SB2026082074
and 2 more
#VU142286 - Improper Link Resolution Before File Access ('Link Following')
CVE-2026-53793
CWE-59 Medium
No
No
3.5.0 13.08.2026 SB2026081362
SB2026081821
SB2026082074
and 2 more
#VU142285 - Improper input validation
CVE-2026-53794
CWE-20 Medium
No
No
3.5.0 13.08.2026 SB2026081362
SB2026081821
SB2026082074
and 2 more
#VU142284 - Improper Link Resolution Before File Access ('Link Following')
CVE-2026-53795
CWE-59 High
No
No
3.5.0 13.08.2026 SB2026081362
SB2026081821
SB2026082074
and 2 more
#VU142283 - Time-of-check Time-of-use (TOCTOU) Race Condition
CVE-2026-53796
CWE-367 Low
No
No
3.5.0 13.08.2026 SB2026081362
SB2026081821
SB2026082074
and 2 more
#VU142282 - Improper Link Resolution Before File Access ('Link Following')
CVE-2026-53797
CWE-59 Low
No
No
3.5.0 13.08.2026 SB2026081362
SB2026081821
SB2026082074
and 2 more
#VU142281 - Improper Link Resolution Before File Access ('Link Following')
CVE-2026-53799
CWE-59 Low
No
No
3.5.0 13.08.2026 SB2026081362
SB2026081821
SB2026082074
and 2 more
#VU142280 - Improper Link Resolution Before File Access ('Link Following')
CVE-2026-53800
CWE-59 Low
No
No
3.5.0 13.08.2026 SB2026081362
SB2026081821
SB2026082074
and 2 more
#VU142266 - Not Failing Securely (\'Failing Open\')
CVE-2026-70452
CWE-636 Medium
No
No
3.5.0 13.08.2026 SB2026081362
SB2026081821
SB2026082074
and 2 more


Showing elements 1 - 20 out of 33