Threats Tagged 'cve-2026-41179'
View all threats tagged with 'cve-2026-41179'. Filter and sort to focus on specific types of threats.
Stop chasing alerts. Route them.
Start free, then upgrade once to turn Radar into an automated delivery engine for your security stack.
Custom feeds / Automations: email, Slack, webhooks, SIEM/MISP / API access (baseline limits)
API access activates after upgrading in Console -> Billing.
Check if your credentials are on the dark web
Instant breach scanning across billions of leaked records. Free tier available.
Filter Threats
Narrow down the results by type, severity, or affected countries
Threats Tagged 'cve-2026-41179'
Click on any threat for detailed analysis and mitigation recommendations
BIT-rclone-2026-41179: RClone: Unauthenticated operations/fsinfo allows attacker-controlled backend instantiation and local command executionCVE-2026-41179 0 Rclone is a command-line program to sync files and directories to and from different cloud storage providers. Starting in version 1.48.0 and prior to version 1.73.5, the RC endpoint `operations/fsinfo` is exposed without `AuthRequired: true` and accepts attacker-controlled `fs` input. Because `rc.GetFs(...)` supports inline backend definitions, an unauthenticated attacker can instantiate an attacker-controlled backend on demand. For the WebDAV backend, `bearer_token_command` is executed during backend initialization, making single-request unauthenticated local command execution possible on reachable RC deployments without global HTTP authentication. Version 1.73.5 patches the issue. Join the discussion | GCVE Database | 04/24/2026, 08:51:09 UTC Added: 07/06/2026, 23:04:15 UTC |
Showing 1 to 1 of 1 result