CVE-2026-30790 | Teknoloji dünyasından en güncel haberleri ve güvenlikle ilgili gelişmeleri takip edin.

Improper Restriction of Excessive Authentication Attempts, Use of Password Hash With Insufficient Computational Effort vulnerability in rustdesk-server-pro Rust…
Critical CVSS: 9.3

CVE-2026-30790

Improper Restriction of Excessive Authentication Attempts, Use of Password Hash With Insufficient Computational Effort vulnerability in rustdesk-server-pro RustDesk Server Pro rustdesk-server-pro on Windows, MacOS, Linux (Peer authentication, API login modules), rustdesk-server RustDesk Server (OSS) rustdesk-server on Windows, MacOS, Linux (Peer authentication, API login modules) allows Password Brute Forcing. This vulnerability is associated with program files src/server/connection.Rs and program routines Salt/challenge generation, SHA256(SHA256(pwd+salt)+challenge) verification.

This issue affects RustDesk Server Pro: through 1.7.5; RustDesk Server (OSS): through 1.1.15.
Vendor
Rustdesk
Product
Rustdesk Server
CWE
CWE-307
Yayın Tarihi
2026-03-05 16:16:19
Güncelleme
2026-03-25 15:43:09
Source Identifier
2fdefc65-d750-4b8d-96ee-6e2c0c42dbfe
KEV Date Added
-

Kategoriler

CWE-307 Rustdesk Server CRITICAL Rustdesk 2026

Referanslar

https://docs.google.com/document/d/e/2PACX-1vSds6jjpd38oO_yIAyd1HYtKNUuea-I-ozAPpGhYI7QgAU-QGJ7D8a4rOZVj1vmiUXV1EcdRHf9aZAW/pub https://github.com/rustdesk https://www.vulsec.org/