https://patchthecve.com/CVEs with upgrade or downgrade fix stepshttps://patchthecve.com/cve/CVE-2026-30798.htmlhttps://patchthecve.com/cve/CVE-2026-30798.htmlMon, 22 Jun 2026 10:16:22 +0000HIGH 7.5: Insufficient Verification of Data Authenticity, Improper Handling of Exceptional Conditions vulnerability in rustdesk-client RustDesk Client rustdesk-client on Windows, MacOS, Linux, iOS, Android (Heartbeat sync loop, strategy processing modules) allows Protocol Manipulation. This vulnerability ishttps://patchthecve.com/cve/CVE-2026-30797.htmlhttps://patchthecve.com/cve/CVE-2026-30797.htmlWed, 17 Jun 2026 10:32:56 +0000HIGH 8.1: Missing Authorization vulnerability in rustdesk-client RustDesk Client rustdesk-client on Windows, MacOS, Linux, iOS, Android (Flutter URI scheme handler, config import modules) allows Application API Message Manipulation via Man-in-the-Middle. This vulnerability is associated with program files fluhttps://patchthecve.com/cve/CVE-2026-30796.htmlhttps://patchthecve.com/cve/CVE-2026-30796.htmlSun, 19 Jul 2026 12:16:48 +0000HIGH 7.5: Cleartext Transmission of Sensitive Information, Insufficiently Protected Credentials vulnerability in rustdesk-client RustDesk Client rustdesk-client on Windows, MacOS, Linux, iOS, Android (Address book sync, Heartbeat sync loop modules) allows Sniffing Attacks. The client places the preset addreshttps://patchthecve.com/cve/CVE-2026-30795.htmlhttps://patchthecve.com/cve/CVE-2026-30795.htmlWed, 17 Jun 2026 10:32:55 +0000HIGH 7.5: Cleartext Transmission of Sensitive Information vulnerability in rustdesk-client RustDesk Client rustdesk-client on Windows, MacOS, Linux, iOS, Android (Heartbeat sync loop modules) allows Sniffing Attacks. This vulnerability is associated with program files src/hbbs_http/sync.Rs and program routinehttps://patchthecve.com/cve/CVE-2026-30793.htmlhttps://patchthecve.com/cve/CVE-2026-30793.htmlWed, 17 Jun 2026 10:32:55 +0000CRITICAL 9.8: Cross-Site Request Forgery (CSRF) vulnerability in rustdesk-client RustDesk Client rustdesk-client on Windows, MacOS, Linux, iOS, Android (Flutter URI scheme handler, FFI bridge modules) allows Privilege Escalation. This vulnerability is associated with program files flutter/lib/common.Dart, src/fluhttps://patchthecve.com/cve/CVE-2026-30792.htmlhttps://patchthecve.com/cve/CVE-2026-30792.htmlMon, 22 Jun 2026 14:17:10 +0000HIGH 8.1: A vulnerability in rustdesk-client RustDesk Client rustdesk-client on Windows, MacOS, Linux, iOS, Android, WebClient (Strategy sync, HTTP API client, config options engine modules) allows Application API Message Manipulation via Man-in-the-Middle. This vulnerability is associated with program filehttps://patchthecve.com/cve/CVE-2026-30789.htmlhttps://patchthecve.com/cve/CVE-2026-30789.htmlMon, 22 Jun 2026 14:16:36 +0000CRITICAL 9.8: Use of Password Hash With Insufficient Computational Effort, Improper Restriction of Excessive Authentication Attempts vulnerability in rustdesk-client RustDesk Client rustdesk-client on Windows, MacOS, Linux, iOS, Android (Client login, peer authentication modules) allows Password Brute Forcing. Thttps://patchthecve.com/cve/CVE-2026-30785.htmlhttps://patchthecve.com/cve/CVE-2026-30785.htmlWed, 17 Jun 2026 10:32:55 +0000MEDIUM 5.5: Improperly Controlled Modification of Object Prototype Attributes ('Prototype Pollution'), Use of Password Hash With Insufficient Computational Effort vulnerability in rustdesk-client RustDesk Client rustdesk, hbb_common on Windows, MacOS, Linux (Password security module, config encryption, machine https://patchthecve.com/cve/CVE-2026-30783.htmlhttps://patchthecve.com/cve/CVE-2026-30783.htmlMon, 22 Jun 2026 14:16:35 +0000CRITICAL 9.8: A vulnerability in rustdesk-client RustDesk Client rustdesk-client on Windows, MacOS, Linux, iOS, Android, WebClient (Client signaling, API sync loop, config management modules) allows Privilege Abuse. This vulnerability is associated with program files src/rendezvous_mediator.Rs, src/hbbs_http/syhttps://patchthecve.com/cve/CVE-2026-3598.htmlhttps://patchthecve.com/cve/CVE-2026-3598.htmlWed, 17 Jun 2026 10:43:50 +0000HIGH 7.5: Use of a Broken or Risky Cryptographic Algorithm vulnerability in rustdesk-server-pro RustDesk Server Pro rustdesk-server-pro on Windows, MacOS, Linux (Config string generation, web console export modules) allows Retrieve Embedded Sensitive Data. This vulnerability is associated with program routinehttps://patchthecve.com/cve/CVE-2026-30791.htmlhttps://patchthecve.com/cve/CVE-2026-30791.htmlWed, 17 Jun 2026 10:32:55 +0000HIGH 7.5: Use of a Broken or Risky Cryptographic Algorithm vulnerability in rustdesk-client RustDesk Client rustdesk-client on Windows, MacOS, Linux, iOS, Android, WebClient (Config import, URI scheme handler, CLI --config modules) allows Retrieve Embedded Sensitive Data. This vulnerability is associated with