rsync project
Security Risk Profile
36
/100
lowSecurity Risk Score
Comprehensive risk assessment based on 6 vulnerabilities, EPSS scores, exploitation status, and remediation availability.
📅 Data spans from May 20, 2026 to present
6
Total CVEs
2
Critical+High
0
Exploited
2
Unpatched
Threat Assessment
Avg CVSS
6.5
Base severity
Avg EPSS
0%
Exploit probability
Unpatched
2
Critical/High
Risk Level
36/100
low
🆕 3Fresh (<7d)📈 5 in Last 30 Days
Severity Distribution
Critical
0High
2Medium
3Low
0Exploit Likelihood
>50% chance
020-50%
05-20%
0<5%
0Age Distribution
Common Weaknesses (CWE)
No CWE data available
Most Affected Products
1. Rsync Project rsync6
Recent Vulnerabilities
See more →CVE-2026-70453
CVSS 7.5high
rsync < 3.5.0 Algorithmic Complexity DoS via hash_search()
8/13/2026🔧 No Patch
CVE-2026-70461
CVSS 8.2high
rsync 3.2.5 < 3.5.0 Heap Out-of-Bounds Write via files-from Entry
8/13/2026🔧 No Patch
CVE-2026-53794
CVSS 5.3medium
rsync < 3.5.0 Denial of Service via --max-alloc=0 Logic Error
8/13/2026🔧 No Patch
CVE-2026-44510
CVSS 6.5medium
Rsync: Receiver-side out-of-bounds read enables remote DoS from malicious server
7/20/2026🔧 No Patch
CVE-2026-44507
CVSS 4.8medium
Rsync: hostname/ACL bypass on DNS-lookup failure
7/20/2026🔧 No Patch
https://seclists.org/oss-sec/2026/q2/620
unknown
rsync 3.4.3 leased: six CVEs (CVE-2026-29518, CVE-2026-43617, CVE-2026-43618, CVE-2026-43619, CVE-2026-43620, CVE-2026-45232)
5/20/2026🔧 No Patch
Monitor rsync project in Real-Time
Get instant alerts when new vulnerabilities are discovered. Stay ahead of security threats with SecAlerts.