Open Source Rsync

Name: Open Source Rsync
Brand: Open Source

productDE

A product tracked in the threat graph; the vulnerabilities below are known to affect it.

KEV-listed

unpatched

critical

by severity

0critical5high2medium1low

updated 2026-10-27

vulnerabilities (46)

Related CVEs.

sort

ID	severity	EPSS	exploitable	patched	published	affected
CVE-2024-12084US	—	72.5% (99th)	Exploit	3.5.0	2025-01-15	< 3.5.0
CVE-2024-12085US	—	8.64% (95th)	Exploit	3.4.0	2025-01-14	< 3.4.0
CVE-2022-29154US	high7.4OT elevated	2.35% (84th)	Exploit	3.2.5	2022-08-02	< 3.2.5
CVE-2026-70463US	—OT elevated	0.36% (30th)	Exploit	3.5.0	2026-08-13	< 3.5.0
CVE-2024-12088US	high7.5	4.65% (92nd)	—	3.4.0	2025-01-14	< 3.4.0
CVE-2024-12087US	high7.5	2.26% (83rd)	—	3.4.0	2025-01-14	< 3.4.0
CVE-2024-12086US	medium6.8	1.79% (78th)	—	3.4.0	2025-01-14	< 3.4.0
CVE-2026-43618US	—	0.78% (56th)	—	3.4.3	2026-05-20	< 3.4.3
CVE-2026-70459US	—	0.72% (54th)	—	3.5.0	2026-08-13	< 3.5.0
CVE-2026-53790US	—	0.63% (50th)	—	3.5.0	2026-08-13	< 3.5.0
CVE-2026-70464US	—	0.57% (47th)	—	3.5.0	2026-08-13	< 3.5.0
CVE-2026-70461US	—	0.57% (47th)	—	3.5.0	2026-08-13	< 3.5.0
CVE-2026-70455US	—	0.57% (47th)	—	3.5.0	2026-08-13	< 3.5.0
CVE-2026-70453US	—	0.53% (44th)	—	3.5.0	2026-08-13	< 3.5.0
CVE-2026-53794US	—	0.51% (43rd)	—	3.5.0	2026-08-13	< 3.5.0
CVE-2026-53791US	—	0.50% (43rd)	—	3.5.0	2026-08-13	< 3.5.0
CVE-2026-70452US	—OT elevated	0.46% (40th)	—	3.5.0	2026-08-13	< 3.5.0
CVE-2026-70462US	—	0.45% (39th)	—	3.5.0	2026-08-13	< 3.5.0
CVE-2026-70460US	—	0.45% (39th)	—	3.5.0	2026-08-13	< 3.5.0
CVE-2026-43620US	medium5.5	0.43% (37th)	—	3.5.0	2026-05-20	< 3.5.0
CVE-2026-53798US	—	0.43% (37th)	—	3.5.0	2026-08-13	< 3.5.0
CVE-2026-53786US	—OT elevated	0.40% (34th)	—	3.5.0	2026-08-13	< 3.5.0
CVE-2026-70458US	—	0.40% (34th)	—	3.5.0	2026-08-13	< 3.5.0
CVE-2026-70456US	—	0.40% (34th)	—	3.5.0	2026-08-13	< 3.5.0
CVE-2026-53795US	—	0.40% (34th)	—	3.5.0	2026-08-13	< 3.5.0
CVE-2026-53793US	—	0.39% (33rd)	—	3.5.0	2026-08-13	< 3.5.0
CVE-2024-12747US	—	0.39% (32nd)	—	3.4.0	2025-01-14	< 3.4.0
CVE-2026-70457US	high8.2	0.38% (32nd)	—	3.5.0	2026-08-13	< 3.5.0
CVE-2026-53783US	—	0.37% (31st)	—	3.5.0	2026-08-13	< 3.5.0
CVE-2026-53789US	high8.1	0.36% (29th)	—	3.5.0	2026-08-13	< 3.5.0
CVE-2026-45232US	low3.7	0.34% (27th)	—	3.4.3	2026-05-20	< 3.4.3
CVE-2026-53792US	—	0.31% (24th)	—	3.5.0	2026-08-13	< 3.5.0
CVE-2026-53801US	—	0.29% (21st)	—	3.5.0	2026-08-13	< 3.5.0
CVE-2026-43617US	—	0.28% (21st)	—	3.5.0	2026-05-20	< 3.5.0
CVE-2026-53788US	—	0.27% (19th)	—	3.5.0	2026-08-13	< 3.5.0
CVE-2026-53802US	—	0.24% (15th)	—	3.5.0	2026-08-13	< 3.5.0
CVE-2026-53784US	—	0.24% (15th)	—	3.5.0	2026-08-13	< 3.5.0
CVE-2026-53803US	—	0.23% (14th)	—	3.5.0	2026-08-13	< 3.5.0
CVE-2026-53785US	—	0.19% (9th)	—	3.5.0	2026-08-13	< 3.5.0
CVE-2026-70454US	—	0.19% (9th)	—	3.5.0	2026-08-13	< 3.5.0
CVE-2026-29518US	—	0.15% (4th)	—	3.4.3	2026-05-20	< 3.4.3
CVE-2026-53797US	—	0.14% (4th)	—	3.5.0	2026-08-13	< 3.5.0
CVE-2026-53800US	—	0.14% (3rd)	—	3.5.0	2026-08-13	< 3.5.0
CVE-2026-43619US	—	0.14% (3rd)	—	3.5.0	2026-05-20	< 3.5.0
CVE-2026-53796US	—	0.13% (3rd)	—	3.5.0	2026-08-13	< 3.5.0
CVE-2026-53799US	—	0.12% (2nd)	—	3.5.0	2026-08-13	< 3.5.0

weaknesses (8)

The flaw types (CWEs) most of these CVEs share.

CWE-59Improper Link Resolution Before File Access ('Link Following')13 CVEs
CWE-22Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')7 CVEs
CWE-367Time-of-check Time-of-use (TOCTOU) Race Condition7 CVEs
CWE-787Out-of-bounds Write6 CVEs
CWE-908Use of Uninitialized Resource6 CVEs
CWE-122Heap-based Buffer Overflow5 CVEs
CWE-390Detection of Error Condition Without Action5 CVEs
CWE-863Incorrect Authorization3 CVEs

sources (1)

Which sources assert this record, and when.

DECERT-Bund (BSI CSAF)46 CVEs

scry

Products carry known vulnerabilities once they are exposed to the internet. See what is exposed on your perimeter with a free passive scan.

Free scan