Rustdesk Server

rustdesk_server

Vendor: Rustdesk • 4 CVEs

CVEs (4)

CVE VENDORS PRODUCTS UPDATED PUBLISHED CVSS
CVE-2026-30796 1Rustdesk 2Rustdesk Rustdesk Server Jul 19, 2026 Mar 5, 2026 6.9 MEDIUM· v4 7.5 HIGH· v3 N/A· v2 Cleartext Transmission of Sensitive Information, Insufficiently Protected Credentials vulnerability in rustdesk-client RustDesk Client rustdesk-client on Windows, MacOS, Linux, iOS, Android (Address book sync, Heartbeat...Show more Cleartext Transmission of Sensitive Information, Insufficiently Protected Credentials vulnerability in rustdesk-client RustDesk Client rustdesk-client on Windows, MacOS, Linux, iOS, Android (Address book sync, Heartbeat sync loop modules) allows Sniffing Attacks. The client places the preset address-book password verbatim into the heartbeat sync JSON body (src/hbbs_http/sync.rs). Over an intact HTTPS session it is not exposed in transit, but it is a reusable shared secret rather than a zero-knowledge proof, so it is recovered by any party that becomes the API endpoint - under the re-homed/rogue API server (CVE-2026-30797) - and the leaked credential then authorizes the server-side address book. This vulnerability is associated with program files src/hbbs_http/sync.rs and program routines heartbeat sync body builder (emits preset-address-book-password). This issue affects RustDesk Client: through 1.4.8.Show less
CVE-2026-30790 1Rustdesk 1Rustdesk Server Jun 22, 2026 Mar 5, 2026 N/A· v4 N/A· v3 N/A· v2 Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority.
CVE-2026-30784 1Rustdesk 1Rustdesk Server Jun 22, 2026 Mar 5, 2026 N/A· v4 N/A· v3 N/A· v2 Rejected reason: This CVE ID has been withdrawn by its CVE Numbering Authority.
CVE-2026-3598 1Rustdesk 1Rustdesk Server Jun 17, 2026 Mar 5, 2026 8.7 HIGH· v4 7.5 HIGH· v3 N/A· v2 Use of a Broken or Risky Cryptographic Algorithm vulnerability in rustdesk-server-pro RustDesk Server Pro rustdesk-server-pro on Windows, MacOS, Linux (Config string generation, web console export modules) allows Retriev...Show more Use of a Broken or Risky Cryptographic Algorithm vulnerability in rustdesk-server-pro RustDesk Server Pro rustdesk-server-pro on Windows, MacOS, Linux (Config string generation, web console export modules) allows Retrieve Embedded Sensitive Data. This vulnerability is associated with program routines Config export/generation routines. This issue affects RustDesk Server Pro: through 1.7.5.Show less