Rrustdesk-client

Products

Exploited and recent CVEs

• CVE-2026-30785 High 8.2 RustDesk Encrypts Local Passwords with World-Readable Machine ID and Fixed Zero Nonce (XSalsa20-Poly1305) <0.1%
• CVE-2026-30783 Medium 4.8 RustDesk Client Can Orphan API Channel to Ignore All Admin Commands and ACL Policies 0.4%
• CVE-2026-30789 Medium 5.7 RustDesk Auth Proof Uses Server-Controlled Salt/Challenge and Fast Double-SHA256, Enabling Offline Brute-Force 0.3%
• CVE-2026-30798 High 8.2 RustDesk Client Accepts Unauthenticated stop-service Command via Strategy Payload 0.3%
• CVE-2026-30797 Critical 9.3 RustDesk rustdesk://config/ URI Silently Re-homes Client to Attacker-Controlled Server 0.5%
• CVE-2026-30796 Medium 6.9 RustDesk Client Transmits Preset Address Book Password Verbatim in Heartbeat Sync 0.5%
• CVE-2026-30795 High 8.7 RustDesk HTTP Client Silently Accepts Invalid TLS Certificates After Handshake Failure 0.3%
• CVE-2026-30793 Critical 9.3 RustDesk Flutter URI Handler Sets Permanent Password Without Privilege Check or User Confirmation 0.3%
• CVE-2026-30792 High 8.3 RustDesk Client Blindly Merges Unauthenticated Strategy Payloads, Bypassing Local Security Settings 0.3%
• CVE-2026-30791 High 8.7 RustDesk Client Accepts Pseudo-Encrypted Config Strings Without Cryptographic Validation 0.3%