Search: CVE-2026-70454

CVE-2026-70454 is a high-severity vulnerability in Rsync versions 3.2.0 through 3.2.3 (openssl mode) and rsync-ssl through 3.4.4 (stunnel mode) involving improper TLS certificate validation. The flaw allows on-path attackers to intercept encrypted sessions by using self-signed or invalid certificates due to failure to properly validate server TLS certificates against trusted CAs and verify hostname matching. This can lead to decryption or tampering of rsync session content without client detection.