Vendor
RsyncProject
40 known vulnerabilities.
Products
1 result · Clear filters · Feed
-
High 8.1CVE-2026-70463 Public exploit
rsync 3.1.0 < 3.5.0 Authorization Bypass via auth users Directive Parsing
rsync 3.1.0 before 3.5.0 contains an authorization bypass in auth users directive parsing. The auth users parser uses comma-only tokenization when splitting the user list, which fails to correctly handle entries of the form @Group Name where the group name co…