samba rsync

Name: samba rsync
Brand: samba

productUS

cpe:2.3:a:samba:rsync:*:*:*:*:*:*:*:*

A product tracked in the threat graph; the vulnerabilities below are known to affect it.

KEV-listed

by severity

3critical10high4medium3low

updated 2026-10-27

vulnerabilities (41)

Related CVEs.

sort

ID	severity	EPSS	exploitable	patched	published	affected
CVE-2024-12084US	—	72.5% (99th)	Exploit	no fix	2025-01-15	2 versions
CVE-2024-12085US	—	8.64% (95th)	Exploit	3.3.0	2025-01-14	< 3.3.0
CVE-2018-5764US	high7.5	6.39% (94th)	Exploit	3.1.3	2018-01-17	< 3.1.3
CVE-2022-29154US	high7.4OT elevated	2.35% (84th)	Exploit	3.2.5	2022-08-02	< 3.2.5
CVE-2026-70463US	—OT elevated	0.36% (30th)	Exploit	3.5.0	2026-08-13	3.1.0 → 3.5.0
CVE-2014-9512US	medium6.4	6.50% (94th)	—	no fix	2015-02-12	= 3.1.1
CVE-2017-16548US	critical9.8	5.78% (93rd)	—	no fix	2017-11-06	≤ 3.1.2
CVE-2008-1720US	high7.5	4.98% (92nd)	—	no fix	2008-04-10	33 versions
CVE-2024-12088US	high7.5	4.65% (92nd)	—	no fix	2025-01-14	≤ 3.3.0
CVE-2014-2855US	high7.8	4.20% (91st)	—	no fix	2014-04-23	42 versions
CVE-2017-17434US	critical9.8	3.27% (88th)	—	no fix	2017-12-06	≤ 3.1.2
CVE-2011-1097US	medium5.1	3.16% (88th)	—	no fix	2011-03-30	8 versions
CVE-2024-12087US	high7.5	2.26% (83rd)	—	no fix	2025-01-14	≤ 3.3.0
CVE-2017-17433US	low3.7OT elevated	1.79% (78th)	—	no fix	2017-12-06	= 3.1.2
CVE-2024-12086US	medium6.8	1.79% (78th)	—	no fix	2025-01-14	≤ 3.3.0
CVE-2020-14387US	high7.4	1.11% (66th)	—	3.2.4	2021-05-27	2 versions
CVE-2017-15994US	critical9.8	1.00% (63rd)	—	no fix	2017-10-29	≤ 3.1.2
CVE-2026-43618US	—	0.78% (56th)	—	no fix	2026-05-20	≤ 3.4.2
CVE-2026-70459US	—	0.72% (54th)	—	3.5.0	2026-08-13	3.0.0 → 3.5.0
CVE-2026-70461US	—	0.57% (47th)	—	3.5.0	2026-08-13	3.2.5 → 3.5.0
CVE-2026-70455US	—	0.57% (47th)	—	3.5.0	2026-08-13	3.4.2 → 3.5.0
CVE-2002-0080US	low2.1	0.53% (44th)	—	2.5.3	2002-03-15	< 2.5.3
CVE-2026-53791US	—	0.50% (43rd)	—	3.5.0	2026-08-13	< 3.5.0
CVE-2026-43620US	medium5.5	0.43% (37th)	—	no fix	2026-05-20	≤ 3.4.2
CVE-2026-53798US	—	0.43% (37th)	—	3.5.0	2026-08-13	< 3.5.0
CVE-2026-53786US	—OT elevated	0.40% (34th)	—	3.5.0	2026-08-13	< 3.5.0
CVE-2026-53795US	—	0.40% (34th)	—	3.5.0	2026-08-13	< 3.5.0
CVE-2026-41035US	high7.8	0.39% (33rd)	—	no fix	2026-04-16	3.0.1 → 3.4.1
CVE-2026-70457US	high8.2	0.38% (32nd)	—	3.5.0	2026-08-13	3.2.3 → 3.5.0
CVE-2026-53789US	high8.1	0.36% (29th)	—	3.5.0	2026-08-13	< 3.5.0
CVE-2026-45232US	low3.7	0.34% (27th)	—	3.4.3	2026-05-20	< 3.4.3
CVE-2026-53801US	—	0.29% (21st)	—	3.5.0	2026-08-13	< 3.5.0
CVE-2026-43617US	—	0.28% (21st)	—	no fix	2026-05-20	≤ 3.4.2
CVE-2026-53802US	—	0.24% (15th)	—	3.5.0	2026-08-13	< 3.5.0
CVE-2026-53784US	—	0.24% (15th)	—	3.5.0	2026-08-13	< 3.5.0
CVE-2026-53803US	—	0.23% (14th)	—	3.5.0	2026-08-13	< 3.5.0
CVE-2026-29518US	—	0.15% (4th)	—	3.4.3	2026-05-20	< 3.4.3
CVE-2026-53797US	—	0.14% (4th)	—	3.5.0	2026-08-13	< 3.5.0
CVE-2026-53800US	—	0.14% (3rd)	—	3.5.0	2026-08-13	< 3.5.0
CVE-2026-43619US	—	0.14% (3rd)	—	no fix	2026-05-20	≤ 3.4.2
CVE-2026-53799US	—	0.12% (2nd)	—	3.5.0	2026-08-13	< 3.5.0

weaknesses (8)

The flaw types (CWEs) most of these CVEs share.

CWE-59Improper Link Resolution Before File Access ('Link Following')9 CVEs
CWE-22Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')6 CVEs
CWE-367Time-of-check Time-of-use (TOCTOU) Race Condition6 CVEs
CWE-908Use of Uninitialized Resource6 CVEs
CWE-122Heap-based Buffer Overflow5 CVEs
CWE-390Detection of Error Condition Without Action5 CVEs
CWE-119Improper Restriction of Operations within the Bounds of a Memory Buffer3 CVEs
CWE-125Out-of-bounds Read3 CVEs

sources (1)

Which sources assert this record, and when.

USNVD / CVE41 CVEs

scry

Products carry known vulnerabilities once they are exposed to the internet. See what is exposed on your perimeter with a free passive scan.

Free scan