https://vulnerability.circl.lu/sightings/feed 2026-09-12T23:31:15.794531+00:00 Vulnerability-Lookup info@circl.lu python-feedgen Contains only the most 10 recent sightings. https://vulnerability.circl.lu/sighting/6c3b853e-da06-46c3-bf24-89c1beb3df4d/export 2026-09-12T23:31:15.819472+00:00 Automation user https://vulnerability.circl.lu/user/automation {"uuid": "6c3b853e-da06-46c3-bf24-89c1beb3df4d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-88045", "type": "seen", "source": "https://www.acn.gov.it/portale/w/rclone-poc-pubblici-per-lo-sfruttamento-delle-cve-2026-88018-cve-2026-88044-cve-2026-88045-cve-2026-88016-e-cve-2026-88017", "content": "Disponibili Proof of Concept (PoC) per le CVE-2026-88018, CVE-2026-88044, CVE-2026-88045, CVE-2026-88016 e CVE-2026-88017 - gi\u00e0 sanate dal vendor - presenti in Rclone.", "creation_timestamp": "2026-09-12T01:00:39.593484Z"} 2026-09-12T01:00:39.593484+00:00 https://vulnerability.circl.lu/sighting/a97f0a0a-717b-440e-86a7-cfe6378d8633/export 2026-09-12T23:31:15.820951+00:00 Automation user https://vulnerability.circl.lu/user/automation {"uuid": "a97f0a0a-717b-440e-86a7-cfe6378d8633", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-88045", "type": "seen", "source": "https://www.acn.gov.it/portale/w/rclone-poc-pubblici-per-lo-sfruttamento-delle-cve-2026-88018-cve-2026-88044-cve-2026-88045-cve-2026-88016-e-cve-2026-88017", "content": "Disponibili Proof of Concept (PoC) per le CVE-2026-88018, CVE-2026-88044, CVE-2026-88045, CVE-2026-88016 e CVE-2026-88017 - gi\u00e0 sanate dal vendor - presenti in Rclone.", "creation_timestamp": "2026-09-11T16:00:46.790487Z"} 2026-09-11T16:00:46.790487+00:00 https://vulnerability.circl.lu/sighting/b2fd87f3-7762-4066-81b0-1b10d006d104/export 2026-09-12T23:31:15.821084+00:00 Automation user https://vulnerability.circl.lu/user/automation {"uuid": "b2fd87f3-7762-4066-81b0-1b10d006d104", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-88045", "type": "seen", "source": "https://gist.github.com/alon710/51fe1c5c2b206d4c1fc4589bae05ba41", "content": "# CVE-2026-88045: CVE-2026-88045: Denial of Service via Uncontrolled Memory Preallocation and Integer Overflow in rclone S3 Compatibility Layer\n\n> **CVSS Score:** 7.5\n> **Published:** 2026-09-10\n> **Full Report:** https://cvereports.com/reports/CVE-2026-88045\n\n## Summary\nA high-severity Denial of Service (DoS) vulnerability in the S3 compatibility layer of rclone allows unauthenticated remote attackers (or authenticated attackers depending on configuration) to trigger rapid memory exhaustion and process termination. The flaw lies in the handling of S3 multipart uploads, where rclone eagerly allocates buffers based on untrusted size headers and fails to prevent integer overflows in its concurrent request admission control.\n\n## TL;DR\nrclone is vulnerable to Denial of Service via uncontrolled resource preallocation and integer overflow in its S3 multipart upload system. Attackers can trigger Out-Of-Memory crashes by sending crafted HTTP headers with extremely large size parameters.\n\n## Technical Details\n\n- **CWE ID**: CWE-789 / CWE-190\n- **Attack Vector**: Network\n- **CVSS**: 7.5 (High)\n- **EPSS**: N/A\n- **Impact**: Availability (Denial of Service)\n- **Exploit Status**: None / PoC\n- **KEV Status**: Not Listed\n\n## Affected Systems\n\n- rclone S3 compatibility layer (serve S3)\n- **rclone**: == 1.75.0 (Fixed in: `1.75.1`)\n\n## Mitigation\n\n- Upgrade rclone to version 1.75.1 or later\n- Enforce authentication on S3 endpoints using the --auth-key flag\n- Deploy a reverse proxy to drop requests with anomalous Content-Length values\n- Reduce idle network socket timeouts on front-end reverse proxies\n\n**Remediation Steps:**\n1. Identify all deployed rclone instances exposing S3 service endpoints (`serve s3`)\n2. Download and install rclone version 1.75.1 or higher\n3. Restart the rclone service to apply the binary update\n4. Verify that client-supplied headers with excessive sizes no longer trigger OOM spikes\n\n## References\n\n- [rclone Security Advisory GHSA-2p48-j3qc-rx9f](https://github.com/rclone/rclone/security/advisories/GHSA-2p48-j3qc-rx9f)\n- [rclone Issue 9616](https://github.com/rclone/rclone/issues/9616)\n- [rclone v1.75.1 Release Notes](https://github.com/rclone/rclone/releases/tag/v1.75.1)\n- [NVD CVE-2026-88045](https://nvd.nist.gov/vuln/detail/CVE-2026-88045)\n- [CVE-2026-88045 Record](https://www.cve.org/CVERecord?id=CVE-2026-88045)\n\n\n---\n*Generated by [CVEReports](https://cvereports.com/reports/CVE-2026-88045) - Automated Vulnerability Intelligence*", "creation_timestamp": "2026-09-11T12:32:14.108252Z"} 2026-09-11T12:32:14.108252+00:00 https://vulnerability.circl.lu/sighting/65b40e21-9c45-4cf5-aa9a-3798a5d40c1b/export 2026-09-12T23:31:15.821213+00:00 Joseph Lee https://vulnerability.circl.lu/user/syspect {"uuid": "65b40e21-9c45-4cf5-aa9a-3798a5d40c1b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-88045", "type": "published-proof-of-concept", "source": "https://github.com/rclone/rclone/security/advisories/GHSA-2p48-j3qc-rx9f", "content": "", "creation_timestamp": "2026-09-11T00:35:27.904345Z"} 2026-09-11T00:35:27.904345+00:00 https://vulnerability.circl.lu/sighting/4b1fcf2a-2430-4d75-ae8d-da1e96617ba9/export 2026-09-12T23:31:15.822257+00:00 Automation user https://vulnerability.circl.lu/user/automation {"uuid": "4b1fcf2a-2430-4d75-ae8d-da1e96617ba9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-88045", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mv6mzpx3oz2k", "content": "\ud83d\udfe0 CVE-2026-88045 - High (7.5)\n\nrclone is a command-line program to sync files and directories to and from different cloud storag...\n\nhttps://www.thehackerwire.com/vulnerability/CVE-2026-88045/\n\n#infosec #cybersecurity #CVE #vulnerability #security #patchstack", "creation_timestamp": "2026-09-10T18:00:49.398674Z"} 2026-09-10T18:00:49.398674+00:00