Approved changes feed: RSS · Atom
cpe:2.3:a:rustdesk:rustdesk:*:*:*:*:webclient:*:*:*
part: a version: * update: *
| Vendor | Rustdesk (5c81e261-0c75-5adf-a77f-edf1b41cf4ba) |
|---|---|
| Product | Rustdesk (ae79ea8d-466a-51c3-bb5a-e2982d1a6e7e) |
| Edition | * |
| Language | * |
| Software edition | webclient |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from purl2cpe mapping |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
pkg:gitee/rustdesk/rustdesk |
purl2cpe | 2026-06-01 10:17:12.646960 |
pkg:github/rustdesk/rustdesk |
purl2cpe | 2026-06-01 10:17:12.646961 |
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2026-30797 |
vulnerable | 2026-06-08 07:57:14.255582 |
RustDesk rustdesk://config/ URI Silently Re-homes Client to Attacker-Controlled Server
Missing Authorization vulnerability in rustdesk-client RustDesk Client rustdesk-client on Windows, MacOS, Linux, iOS, Android (Flutter URI scheme handler, config import modules) allows Application API Message Manipulation via Man-in-the-Middle. This vulnerability is associated with program files flutter/lib/common.Dart and program routines importConfig() via URI handler.
This issue affects RustDesk Client: through 1.4.5.
Published: 2026-03-05T15:35:08.889Z
Updated: 2026-03-17T14:31:59.164Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2026-30795 |
vulnerable | 2026-06-08 07:57:14.232348 |
RustDesk HTTP Client Silently Accepts Invalid TLS Certificates After Handshake Failure
Cleartext Transmission of Sensitive Information vulnerability in rustdesk-client RustDesk Client rustdesk-client on Windows, MacOS, Linux, iOS, Android (Heartbeat sync loop modules) allows Sniffing Attacks. This vulnerability is associated with program files src/hbbs_http/sync.Rs and program routines Heartbeat JSON payload construction (preset-address-book-password).
This issue affects RustDesk Client: through 1.4.5.
Published: 2026-03-05T15:27:16.596Z
Updated: 2026-03-17T14:31:15.664Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2026-30794 |
vulnerable | 2026-06-08 07:57:14.231111 |
Details available
Published: 2026-03-05T15:24:34.784Z
Updated: 2026-06-22T13:07:16.269Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2026-30793 |
vulnerable | 2026-06-08 07:57:14.221146 |
RustDesk Flutter URI Handler Sets Permanent Password Without Privilege Check or User Confirmation
Cross-Site Request Forgery (CSRF) vulnerability in rustdesk-client RustDesk Client rustdesk-client on Windows, MacOS, Linux, iOS, Android (Flutter URI scheme handler, FFI bridge modules) allows Privilege Escalation. This vulnerability is associated with program files flutter/lib/common.Dart, src/flutter_ffi.Rs and program routines URI handler for rustdesk://password/, bind.MainSetPermanentPassword().
This issue affects RustDesk Client: through 1.4.5.
Published: 2026-03-05T15:21:03.405Z
Updated: 2026-03-17T14:30:50.566Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2026-30792 |
vulnerable | 2026-06-08 07:57:14.219681 |
RustDesk Client Blindly Merges Unauthenticated Strategy Payloads, Bypassing Local Security Settings
A vulnerability in rustdesk-client RustDesk Client rustdesk-client on Windows, MacOS, Linux, iOS, Android, WebClient (Strategy sync, HTTP API client, config options engine modules) allows Application API Message Manipulation via Man-in-the-Middle.
This vulnerability is associated with program files src/hbbs_http/sync.Rs, hbb_common/src/config.Rs and program routines Strategy merge loop in sync.Rs, Config::set_options().
This issue affects RustDesk Client: through 1.4.8.
Published: 2026-03-05T15:14:43.719Z
Updated: 2026-06-22T13:17:04.057Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2026-30791 |
vulnerable | 2026-06-08 07:57:14.218562 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2026-30789 |
vulnerable | 2026-06-08 07:57:14.210610 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2026-30783 |
vulnerable | 2026-06-08 07:57:14.194357 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.