İçeriğe atla
Noroxi

rclone kayıtları

rclone üreticisine ait 14 yayımlanmış kayıt.

Araştırmacı profili

KEV’e giren
0 · %0
Silahlaştırılmış
0 · %0
Pre-auth RCE
3
Düzeltme kaydı olan
%92,9
Yayından KEV’e ortanca
KEV’e giren kayıt yok

Yıllara göre kayıt

  1. 18
  2. 20
  3. 26

Çubuk: toplam · koyu kısım: CISA KEV.

Tekrar eden sınıflar

Bu üreticide en sık görülen zafiyet sınıfları: nereye bakmalı.

CWE

Saldırı profili

Tüm kayıtlar

14 kayıt
  • CVE-2026-49980
    39İzleyin

    Rclone: Unauthenticated command execution in `rclone rcd --rc-serve` via inline remote instantiation, bypassing CVE-2026-41179 fix

    KritikCVSS 9,8İstismar yokEPSS %1

    rclone · rclone24 Haz 2026

  • CVE-2026-88018
    39İzleyin

    rclone serve s3: --auth-proxy without --auth-key authenticates nobody - full SigV4 signature bypass

    KritikCVSS 9,8İstismar yokEPSS %1

    rclone · rclone10 Eyl 2026

  • CVE-2026-41179
    38İzleyin

    RClone: Unauthenticated operations/fsinfo allows attacker-controlled backend instantiation and local command execution

    KritikCVSS 9,2Kavram kanıtıEPSS %5

    rclone · rclone22 Nis 2026

  • CVE-2026-41176
    37İzleyin

    Rclone: Unauthenticated options/set allows runtime auth bypass, leading to sensitive operations and command execution

    KritikCVSS 9,2Kavram kanıtıEPSS %3

    rclone · rclone22 Nis 2026

  • CVE-2026-59733
    35İzleyin

    rclone `serve restic --private-repos` authorization bypass: `..` in the URL path lets an authenticated user read, overwrite and delete other users' repositories

    YüksekCVSS 8,8İstismar yokEPSS %1

    rclone · rclone14 Tem 2026

  • CVE-2026-54572
    35İzleyin

    rclone: Unvalidated symlink target in local `--links` — arbitrary file write from an untrusted remote

    YüksekCVSS 8,8İstismar yokEPSS %0

    rclone · rclone14 Tem 2026

  • CVE-2020-28924
    30İzleyin

    An issue was discovered in Rclone before 1.53.3.

    YüksekCVSS 7,5İstismar yokEPSS %1

    rclone · rclone19 Kas 2020

  • CVE-2018-12907
    30İzleyin

    In Rclone 1.42, use of "rclone sync" to migrate data between two Google Cloud Storage buckets might allow attackers to trigger the transmiss

    YüksekCVSS 7,5İstismar yokEPSS %1

    rclone · rclone27 Haz 2018

  • CVE-2026-88017
    29İzleyin

    rclone: FTP cross-session auth-proxy backend confusion

    YüksekCVSS 7,3İstismar yokEPSS %0

    rclone · rclone10 Eyl 2026

  • CVE-2026-88016
    28İzleyin

    rclone: Directory metadata (chmod/chown/chtimes) applied through a planted symlink in rclone local --links escapes the destination

    YüksekCVSS 7,1İstismar yokEPSS %0

    rclone · rclone10 Eyl 2026

  • CVE-2026-88014
    25İzleyin

    rclone archive/zip: Zip Slip via unsanitized zip entry names lets a malicious archive escape its own namespace

    OrtaCVSS 6,3İstismar yokEPSS %0

    rclone · rclone10 Eyl 2026

  • CVE-2026-88015
    21İzleyin

    rclone local: crafted Range request against a translated symlink panics (DoS)

    OrtaCVSS 5,3İstismar yokEPSS %1

    rclone · rclone10 Eyl 2026

  • CVE-2026-88013
    21İzleyin

    rclone: http backend forwards custom/auth headers to a different host on redirect

    OrtaCVSS 5,3İstismar yokEPSS %0

    rclone · rclone10 Eyl 2026

  • CVE-2026-59732
    20İzleyin

    rclone archive extract allows S3 destination prefix escape via crafted archive paths

    OrtaCVSS 5,0İstismar yokEPSS %0

    rclone · rclone14 Tem 2026