Products: 2
    Vulnerabilities: 33
    Known Exploited: 0
    6
    Critical Level Threats
    13
    High Level Threats
    6
    Medium Level Threats
    0
    Low Level Threats

    Vulnerabilities

    100806040200
    JanFebMarAprMayJunJulAugSepOctNovDec
    Critical Level Threats
    High Level Threats
    Medium Level Threats
    Low Level Threats

    Products Security index

    Actions
    Items Per Page

    Vulnerabilities

    CVE-2026-73290

    RustFS: Anonymous ListObjectVersions bypasses RestrictPublicBuckets through the ListBucket fallback

    Last Modified: Aug 12, 2026
    Published: Aug 12, 2026

    CVE-2026-73289

    RustFS: ForAllValues/ForAnyValue negated string conditions are transposed, inverting IAM and bucket-policy decisions

    Last Modified: Aug 12, 2026
    Published: Aug 12, 2026

    CVE-2026-73288

    RustFS: Object Lock (WORM) protections are treated as absent when bucket metadata cannot be read, allowing retained objects to be deleted

    Last Modified: Aug 12, 2026
    Published: Aug 12, 2026

    CVE-2026-73287

    RustFS: FTPS MKD bypasses IAM CreateBucket authorization

    Last Modified: Aug 13, 2026
    Published: Aug 12, 2026

    CVE-2026-73286

    RustF: Request headers can populate server-derived IAM condition keys, letting a caller satisfy identity-based policy conditions

    Last Modified: Aug 12, 2026
    Published: Aug 12, 2026
    Items Per Page
    Rustfs Vulnerabilities & Security CVEs | CVE-DB