https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-03T11:25:15.888794+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/bit-rclone-2026-79782 BIT-rclone-2026-79782 — rclone before 1.74.4 Security Token Disclosure via HTTPS to HTTP Redirect 2026-10-03T11:25:15.962791+00:00

Affected: Bitnami: rclone

rclone before 1.74.4 fails to strip the X-Amz-Security-Token header when an S3 redirect changes scheme from HTTPS to HTTP on the same host. Attackers can intercept plaintext HTTP traffic to capture AWS STS session tokens sent in request headers.

 https://cve.radiocsirt.org/vuln/euvd-2026-361469 EUVD-2026-361469 2026-10-03T11:25:15.962885+00:00 EUVD-2026-361469 https://cve.radiocsirt.org/vuln/fkie_cve-2026-79782 fkie_cve-2026-79782 2026-10-03T11:25:15.962902+00:00

rclone before 1.74.4 fails to strip the X-Amz-Security-Token header when an S3 redirect changes scheme from HTTPS to HTTP on the same host. Attackers can intercept plaintext HTTP traffic to capture AWS STS session tokens sent in request headers.

 https://cve.radiocsirt.org/vuln/ghsa-mwgh-564g-j9ww GHSA-mwgh-564g-j9ww 2026-10-03T11:25:15.962925+00:00

rclone before 1.74.4 fails to strip the X-Amz-Security-Token header when an S3 redirect changes scheme from HTTPS to HTTP on the same host. Attackers can intercept plaintext HTTP traffic to capture AWS STS session tokens sent in request headers.

 https://cve.radiocsirt.org/vuln/ubuntu-cve-2026-79782 UBUNTU-CVE-2026-79782 2026-10-03T11:25:15.962940+00:00

Affected: Ubuntu:18.04:LTS: rclone, Ubuntu:Pro:20.04:LTS: rclone, Ubuntu:Pro:22.04:LTS: rclone, Ubuntu:Pro:24.04:LTS: rclone, Ubuntu:Pro:26.04:LTS: rclone

rclone before 1.74.4 fails to strip the X-Amz-Security-Token header when an S3 redirect changes scheme from HTTPS to HTTP on the same host. Attackers can intercept plaintext HTTP traffic to capture AWS STS session tokens sent in request headers.

 https://cve.radiocsirt.org/vuln/wid-sec-w-2026-2266 WID-SEC-W-2026-2266 — rclone: Mehrere Schwachstellen 2026-10-03T11:25:15.962966+00:00

Ein entfernter, authentisierter Angreifer kann mehrere Schwachstellen in rclone ausnutzen, um beliebige Dateien zu lesen und zu schreiben, sowie Informationen offenzulegen und Sicherheitsmechanismen zu umgehen.