https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-02T11:32:41.526128+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/bit-rclone-2026-79780 BIT-rclone-2026-79780 — rclone before v1.75.0 Credential Exposure via S3 Redirect 2026-10-02T11:32:41.604786+00:00

Affected: Bitnami: rclone

rclone before v1.75.0 fails to sanitize IBM IAM bearer tokens and SSE-C encryption keys during S3 redirect callbacks, allowing credentials to be preserved across scheme or host changes. Attackers observing network traffic from a trusted endpoint can capture reusable IBM IAM tokens on same-host HTTPS-to-HTTP downgrades or SSE-C keys on cross-origin redirects to access protected S3 objects.

 https://cve.radiocsirt.org/vuln/euvd-2026-358818 EUVD-2026-358818 2026-10-02T11:32:41.604842+00:00 EUVD-2026-358818 https://cve.radiocsirt.org/vuln/fkie_cve-2026-79780 fkie_cve-2026-79780 2026-10-02T11:32:41.604859+00:00

rclone before v1.75.0 fails to sanitize IBM IAM bearer tokens and SSE-C encryption keys during S3 redirect callbacks, allowing credentials to be preserved across scheme or host changes. Attackers observing network traffic from a trusted endpoint can capture reusable IBM IAM tokens on same-host HTTPS-to-HTTP downgrades or SSE-C keys on cross-origin redirects to access protected S3 objects.

 https://cve.radiocsirt.org/vuln/ghsa-fj78-v5f5-cphq GHSA-fj78-v5f5-cphq 2026-10-02T11:32:41.604883+00:00

rclone before v1.75.0 fails to sanitize IBM IAM bearer tokens and SSE-C encryption keys during S3 redirect callbacks, allowing credentials to be preserved across scheme or host changes. Attackers observing network traffic from a trusted endpoint can capture reusable IBM IAM tokens on same-host HTTPS-to-HTTP downgrades or SSE-C keys on cross-origin redirects to access protected S3 objects.

 https://cve.radiocsirt.org/vuln/ubuntu-cve-2026-79780 UBUNTU-CVE-2026-79780 2026-10-02T11:32:41.604899+00:00

Affected: Ubuntu:18.04:LTS: rclone, Ubuntu:Pro:20.04:LTS: rclone, Ubuntu:Pro:22.04:LTS: rclone, Ubuntu:Pro:24.04:LTS: rclone, Ubuntu:Pro:26.04:LTS: rclone

rclone before v1.75.0 fails to sanitize IBM IAM bearer tokens and SSE-C encryption keys during S3 redirect callbacks, allowing credentials to be preserved across scheme or host changes. Attackers observing network traffic from a trusted endpoint can capture reusable IBM IAM tokens on same-host HTTPS-to-HTTP downgrades or SSE-C keys on cross-origin redirects to access protected S3 objects.

 https://cve.radiocsirt.org/vuln/wid-sec-w-2026-2623 WID-SEC-W-2026-2623 — rclone: Mehrere Schwachstellen 2026-10-02T11:32:41.604926+00:00

Ein Angreifer kann mehrere Schwachstellen in rclone ausnutzen, um Dateien zu manipulieren, um einen Denial of Service Angriff durchzuführen, um Informationen offenzulegen, um Sicherheitsvorkehrungen zu umgehen, und um beliebigen Programmcode auszuführen.