Skip to content
OpenAdvisories

Vendor

RsyncProject

40 known vulnerabilities.

Products

rsync 40
All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • Critical 9.1
    CVE-2026-53791

    rsync < 3.5.0 Daemon IP Spoofing via PROXY Protocol Header

    rsync daemon before 3.5.0 contains an IP address spoofing vulnerability that allows unauthenticated remote attackers to bypass IP-based access controls by sending a crafted PROXY protocol header with a forged source address. Attackers who can connect directly…

    RsyncProject rsync rsync rsync Debian Ubuntu Azure Linux Alpine