R
Vendor security profile
rclone
Product portfolio, patch evidence and exploitation signals in a single security scorecard
The data is combined from the CVE Program, NVD, CISA KEV and vendor security advisories.
Total CVEs31
Critical0
CISA KEV0
Public exploit0
Patch rate—
Avg. CVSS—
12-month vulnerability rate
CVE KEV
CVE severity distribution
31toplam CVE
Uncertain31 (100%)
Patch and exploitation view
%0
Verified patch
%0
CISA KEV
%0
Public exploit
0Patch available
0Partial
0Workaround
0Vendor: no patch
31Unknown
Latest vulnerabilities
4.6
CVE-2026-93987rclone serve docker Path Traversal via Volume Name
Patch status unknownEPSS %0
2.3
CVE-2026-93986rclone before 1.75.1 Path Traversal via Directory Listing Names
Patch status unknownEPSS %0
5.3
CVE-2026-88046rclone: source object names can escape the configured root on upload
Patch verifiedEPSS %0
7.5
CVE-2026-88045rclone: S3 multipart declared-length memory exhaustion
Patch verifiedEPSS %1
9.1
CVE-2026-88044rclone: RC per-server auth-proxy bypass
Patch verifiedEPSS %0
9.8
7.3
CVE-2026-88017rclone: FTP cross-session auth-proxy backend confusion
Patch verifiedEPSS %0
5.3