Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1000 CNY

100.0%
Buy Us a Coffee

RustDesk Client — Vulnerabilities & Security Advisories 10

All 10 CVE vulnerabilities found in RustDesk Client, with AI-generated Chinese analysis, references, and POCs.

Vendor: rustdesk-client

CVE IDTitleCVSSSeverityPublished
CVE-2026-30785 RustDesk Encrypts Local Passwords with World-Readable Machine ID and Fixed Zero Nonce (XSalsa20-Poly1305) CWE-257 6.2 -2026-03-05
CVE-2026-30783 RustDesk Client Can Orphan API Channel to Ignore All Admin Commands and ACL Policies CWE-602 8.8 -2026-03-05
CVE-2026-30789 RustDesk Client Generates Auth Proof Without Client-Side Nonce, Enabling Replay Attacks CWE-294 8.4 -2026-03-05
CVE-2026-30798 RustDesk Client Accepts Unauthenticated stop-service Command via Strategy Payload CWE-345 9.8 -2026-03-05
CVE-2026-30797 RustDesk rustdesk://config/ URI Silently Re-homes Client to Attacker-Controlled Server CWE-862 8.1 -2026-03-05
CVE-2026-30795 RustDesk HTTP Client Silently Accepts Invalid TLS Certificates After Handshake Failure CWE-319 7.5 -2026-03-05
CVE-2026-30794 RustDesk HTTP Client Silently Accepts Invalid TLS Certificates After Handshake Failure CWE-295 7.4 -2026-03-05
CVE-2026-30793 RustDesk Flutter URI Handler Sets Permanent Password Without Privilege Check or User Confirmation CWE-285 8.8 -2026-03-05
CVE-2026-30792 RustDesk Client Blindly Merges Unauthenticated Strategy Payloads, Bypassing Local Security Settings CWE-657 7.4 -2026-03-05
CVE-2026-30791 RustDesk Client Accepts Pseudo-Encrypted Config Strings Without Cryptographic Validation CWE-327 9.8 -2026-03-05

All 10 known CVE vulnerabilities affecting RustDesk Client with full Chinese analysis, references, and POCs where available.