Sploitus

15 exploited vulnerabilities in Rclone

Vulnerabilities with publicly known exploits

Vendors
Linux Mint, Rclone, Canonical, Opensuse, Suse, Cleanstart
With known exploits
15
Affected Rclone versions
< 1.73.5, 1.74.4
Affected Golang Net versions
< 0.55.0
Affected Golang Crypto versions
< 0.52.0

Vulnerabilities with exploits

Highest CVSS first — 1 of these already have exploit code on Sploitus

CVE-2026-41179 1 exploit
CVSS 10.0 CRITICAL 2026-04-19FIX AVAILABLE
Exploit for Missing Authentication for Critical Function in Rclone
CVE-2026-41176
CVSS 10.0 CRITICAL 2026-04-19FIX AVAILABLE
CVE-2026-49980
CVSS 9.8 CRITICAL 2026-06-07FIX AVAILABLE
CVE-2026-42506
CVSS 9.8 CRITICAL 2026-05-22
CVE-2026-42502
CVSS 9.8 CRITICAL 2026-05-22
CVE-2026-25680
CVSS 9.8 CRITICAL 2026-05-22
CVE-2026-46598
CVSS 9.8 CRITICAL 2026-05-22
CVE-2026-46597
CVSS 9.8 CRITICAL 2026-05-22
CVE-2026-39828
CVSS 9.8 CRITICAL 2026-05-22
CVE-2026-39827
CVSS 9.8 CRITICAL 2026-05-22
CVE-2026-59733
CVSS 8.8 HIGH 2026-07-09FIX AVAILABLE
CVE-2026-54572
CVSS 8.8 HIGH 2026-07-09FIX AVAILABLE
CVE-2020-28924
CVSS 7.5 HIGH 2020-11-19FIX AVAILABLE
CVE-2024-52522
CVSS 5.5 MEDIUM 2024-11-15FIX AVAILABLE
CVE-2026-59732
CVSS 5.0 MEDIUM 2026-07-09FIX AVAILABLE