Free and open · new CVEs checked every 20 minutesStatusRSSOpen dataContact

CVE-2026-70458: rsync 3.0.0 before 3.5.0 contains an out-of-bounds write vulnerability that allows attackers to corrupt memory

42
This month
HIGH 8.2REMOTE

CVE-2026-70458 is a high-severity flaw (CVSS 8.2) affecting affected software. Below: why it ranks where it does, which versions are affected, what to do, and the exact commands.

rsync 3.0.0 before 3.5.0 contains an out-of-bounds write vulnerability that allows attackers to corrupt memory by triggering HLINK_BUMP processing on file entries with the FLAG_HLINKED flag set while the hard-link preservation option is inactive. Attackers can exploit the missing F_SUM field in the file_struct layout to access memory past the end of the allocated structure, corrupting adjacent heap or stack data.

Why this priority

  • High severity
  • Remotely exploitable, no login, no user action

A fixed release or distro patch exists.

Risk facts

CVSS score8.2 (High)
Attack vectorNetwork (remote)
Attack complexityLow
Privileges neededNone
User interactionNone
EPSS exploit chance0.4% (top 67%)
CISA exploited listNo
WeaknessCWE-787
Published2026-08-13
Last modified2026-10-23
Publisher (CNA): VulnCheck

Last updated 2026-10-23 · Sources: CVE Program, NVD, CISA KEV, EPSS and vendor advisories · How we score

Timeline

Exact fixes by distribution

Fedora 46 · kwin-zones · FIXED · 1.0.13-1.fc46 · FEDORA-2026-95888f332b · source
sudo dnf upgrade --advisory=FEDORA-2026-95888f332b
Fedora ELN · nginx-mod-brotli · FIXED · 1.0.0~rc-16.eln159 · FEDORA-2026-501a6a8273 · source
sudo dnf upgrade --advisory=FEDORA-2026-501a6a8273
Debian 12 · rsync · NO FIX YET
Debian 13 · rsync · FIXED · 3.5.0+ds1-0+deb13u1
sudo apt update && sudo apt install --only-upgrade rsync dpkg --compare-versions "$(dpkg-query -W -f='${Version}' rsync)" ge "3.5.0+ds1-0+deb13u1" && echo PATCHED || echo STILL-VULNERABLE
RHEL 10 · rsync · FIXED · rsync-3.5.0-3.el10_2
sudo dnf upgrade --advisory=RHSA-2026:67463 rpm -q rsync
RHEL 8 · rsync · FIXED · rsync-3.1.3-28.el8_10
sudo dnf upgrade --advisory=RHSA-2026:74095 rpm -q rsync
RHEL 9 · rsync · FIXED · rsync-3.2.7-1.el9_8
sudo dnf upgrade --advisory=RHSA-2026:67462 rpm -q rsync
RHEL 6 · rsync · NO FIX YET
RHEL 7 · rsync · NO FIX YET
Alpine 3.21 · rsync · FIXED · rsync-3.5.0-r0
apk add --upgrade rsync apk info -v rsync
Alpine 3.22 · rsync · FIXED · rsync-3.5.0-r0
apk add --upgrade rsync apk info -v rsync
Alpine 3.23 · rsync · FIXED · rsync-3.5.0-r0
apk add --upgrade rsync apk info -v rsync
Alpine 3.24 · rsync · FIXED · rsync-3.5.0-r0
apk add --upgrade rsync apk info -v rsync
Amazon Linux 2023 · see advisory · FIXED · ALAS2023-2026-3131 · source
sudo dnf update --advisory=ALAS2023-2026-3131
Amazon Linux 2 · see advisory · FIXED · ALAS2-2026-3945 · source
sudo yum update --advisory=ALAS2-2026-3945

Advisories and coverage

Official advisories

Verify at the official source NVD · CVE Program · Report a problem with this page
Scores and fixes here are computed automatically from those and other public sources. Confirm with the vendor advisory before changing production systems.

Quick answers

How do I fix CVE-2026-70458?

No fixed release is listed yet. Watch the vendor advisory and apply any mitigation shown on this page.

Is CVE-2026-70458 being exploited?

CVE-2026-70458 is not on the CISA Known Exploited Vulnerabilities list at the time of the last update. Check again, as this can change.

What does CVE-2026-70458 affect?

CVE-2026-70458 affects affected software. Severity is high (CVSS 8.2). rsync 3.0.0 before 3.5.0 contains an out-of-bounds write vulnerability that allows attackers to corrupt memory by triggering HLINK_BUMP processing on file entries with the FLAG_HLINKED flag set while the hard-link preservation option is ina

How urgent is CVE-2026-70458?

Priority 42/100. High severity; Remotely exploitable, no login, no user action

References

← Back to latest CVEs