Skip to content
Noroxi

ncw

21 credited records · 21 in the last 12 months · 0 in CISA KEV

Names are free text from CNA records; the same person may appear under different spellings. Write to us for corrections.

Get told when this name is credited on a new CVE

If it's you, this is the easiest way to track your records: we'll notify you in the daily email digest when a new one is published.

Follow new records for ncw

When you'll hear from us

  • when this name is credited on a new CVE record

One daily email digest (06:00 UTC); connect a webhook for KEV listings and weaponized exploits instantly.

Your free account also gets you

Running WordPress? Scan your site free with WP Lens

  • Stack alerts: add the products and versions you run, get the new CVEs that affect them
  • Uptime monitoring: 1 site, instant email when it goes down
  • Add your domain: subdomains and takeover risk scanned every week (1 domain)
  • 10 scans an hour on the security tools (3 a day without an account), an API key and MCP
  • All your scans in one panel: findings, what changed in the last scan, a report per domain or per client (PDF, share link)
All free tools

Sign up with email · Have an account? Sign in

Free account, no card. Unfollow any time.

Don't want an account? Get "Exploited this week" by email every Monday

Credited records

Researchers
  • CVE-2026-116196
    24Monitor

    Rclone before v1.75.2 B2 Credential Leak on Redirect via --b2-download-url

    MediumCVSS 6.0No exploitEPSS 0%

    rclone · rcloneOct 25, 2026

  • CVE-2026-116195
    28Monitor

    Rclone before 1.75.2 Path Traversal via translateLink .rclonelink Suffix Trim

    HighCVSS 7.0No exploitEPSS 0%

    rclone · rcloneOct 25, 2026

  • CVE-2026-116194
    30Monitor

    Rclone 1.52.0 before 1.75.2 CSRF via pCloud OAuth Callback

    HighCVSS 7.6No exploitEPSS 0%

    rclone · rcloneOct 25, 2026

  • CVE-2026-116193
    27Monitor

    Rclone 1.64.0 before 1.75.2 serve webdav Authentication Bypass via OPTIONS Requests

    MediumCVSS 6.9No exploitEPSS 0%

    rclone · rcloneOct 25, 2026

  • CVE-2026-116192
    32Monitor

    rclone from 1.37 before 1.74.2 SSRF via --rc-serve scheme-relative remote roots

    HighCVSS 8.2No exploitEPSS 0%

    rclone · rcloneOct 25, 2026

  • CVE-2026-116191
    34Monitor

    Rclone before 1.75.2 Path Traversal via serve webdav MKCOL

    HighCVSS 8.7Proof of conceptEPSS 0%

    rclone · rcloneOct 25, 2026

  • CVE-2026-116190
    25Monitor

    rclone v1.56.0 before v1.75.2 WebDAV Credential Header Leak on Redirect

    MediumCVSS 6.3No exploitEPSS 0%

    rclone · rcloneOct 25, 2026

  • CVE-2026-116189
    30Monitor

    rclone 1.55.0 before 1.75.2 selfupdate Signature Verification Bypass via SHA256SUMS

    HighCVSS 7.7No exploitEPSS 0%

    rclone · rcloneOct 25, 2026

  • CVE-2026-116188
    27Monitor

    rclone serve s3 1.75.0 before 1.75.2 Memory Limit Bypass via Multipart Overflow

    MediumCVSS 6.9No exploitEPSS 0%

    rclone · rcloneOct 25, 2026

  • CVE-2026-116187
    24Monitor

    Rclone v1.68.0 before v1.75.2 Authorization Bypass in serve s3 Multipart Uploads

    MediumCVSS 6.1No exploitEPSS 0%

    rclone · rcloneOct 25, 2026

  • CVE-2026-93987
    18Monitor

    rclone serve docker Path Traversal via Volume Name

    MediumCVSS 4.6No exploitEPSS 0%

    rclone · rcloneSep 19, 2026

  • CVE-2026-93986
    9Monitor

    rclone before 1.75.1 Path Traversal via Directory Listing Names

    LowCVSS 2.3No exploitEPSS 0%

    rclone · rcloneSep 19, 2026

  • CVE-2026-79783
    8Monitor

    rclone before 1.74.4 Privilege Escalation via setuid Metadata

    LowCVSS 2.0No exploitEPSS 0%

    rclone · rcloneAug 25, 2026

  • CVE-2026-79782
    37Monitor

    rclone before 1.74.4 Security Token Disclosure via HTTPS to HTTP Redirect

    CriticalCVSS 9.3No exploitEPSS 0%

    rclone · rcloneAug 25, 2026

  • CVE-2026-79781
    27Monitor

    rclone serve s3 Path Traversal via dot-dot object keys

    MediumCVSS 6.9No exploitEPSS 0%

    rclone · rcloneAug 25, 2026

  • CVE-2026-79780
    24Monitor

    rclone before v1.75.0 Credential Exposure via S3 Redirect

    MediumCVSS 6.0No exploitEPSS 0%

    rclone · rcloneAug 25, 2026

  • CVE-2026-79779
    24Monitor

    rclone before v1.75.0 WebDAV Credential Exposure via HTTPS-to-HTTP Redirect

    MediumCVSS 6.0No exploitEPSS 0%

    rclone · rcloneAug 25, 2026

  • CVE-2026-79778
    24Monitor

    rclone before v1.75.0 Denial of Service via TUS nil-response panic

    MediumCVSS 6.0No exploitEPSS 0%

    rclone · rcloneAug 25, 2026

  • CVE-2026-79777
    20Monitor

    rclone before v1.75.0 Information Disclosure via RC API

    MediumCVSS 5.1No exploitEPSS 0%

    rclone · rcloneAug 25, 2026

  • CVE-2026-79776
    27Monitor

    rclone before 1.75.0 Authentication Bypass via pprof

    MediumCVSS 6.9No exploitEPSS 0%

    rclone · rcloneAug 25, 2026

  • CVE-2026-79775
    28Monitor

    rclone Archive Backend SquashFS Parser Denial of Service

    HighCVSS 7.1No exploitEPSS 0%

    rclone · rcloneAug 25, 2026