R
Vendor security profile
rsync
Product portfolio, patch evidence and exploitation signals in a single security scorecard
The data is combined from the CVE Program, NVD, CISA KEV and vendor security advisories.
Total CVEs35
Critical0
CISA KEV0
Public exploit0
Patch rate—
Avg. CVSS—
12-month vulnerability rate
CVE KEV
CVE severity distribution
35toplam CVE
Uncertain35 (100%)
Patch and exploitation view
%0
Verified patch
%0
CISA KEV
%0
Public exploit
0Patch available
0Partial
0Workaround
0Vendor: no patch
35Unknown
Latest vulnerabilities
9.1
8.7
CVE-2026-70453rsync < 3.5.0 Algorithmic Complexity DoS via hash_search()
Patch status unknownEPSS %1
7.6
8.7
CVE-2026-70455rsync 3.4.2 < 3.5.0 DoS via --zt Zstandard Compression Thread Exhaustion
Patch status unknownEPSS %1
8.8
CVE-2026-70456rsync 3.0.1 < 3.5.0 Heap Out-of-Bounds Write via read_args()
Patch status unknownEPSS %0
8.3
CVE-2026-70457rsync 3.2.3 < 3.5.0 Out-of-Bounds Write via parse_size_arg()
Patch status unknownEPSS %0
8.8
CVE-2026-70458rsync 3.0.0 < 3.5.0 Out-of-Bounds Write via FLAG_HLINKED Handling
Patch status unknownEPSS %0
6.9
CVE-2026-70459rsync 3.0.0 < 3.5.0 Daemon Crash via Malformed File List Entry
Patch status unknownEPSS %1
9.2
8.8
CVE-2026-70461rsync 3.2.5 < 3.5.0 Heap Out-of-Bounds Write via files-from Entry
Patch status unknownEPSS %1