VulnSocial

CVE-2026-88044PoC

LOWCVSS 9.1 · CRITICAL

Exploit discussion active in current signal (1 latest mentions)

Immediate actions

  • Hunt for exploitation attempts and persistence artifacts
  • Increase monitoring for publicly documented tradecraft
  • Track advisory updates for patch or workaround availability

Recommended action window: High priority (within 72h)

NVD description

rclone is a command-line program to sync files and directories to and from different cloud storage providers. From 1.70.0 until 1.75.1, the serve/start RC interface accepts per-server proxyOpt.AuthProxy settings, and the FTP and S3 constructors in cmd/serve/ftp/ftp.go and cmd/serve/s3/server.go incorrectly check the process-global proxy.Opt.AuthProxy value instead. When the global value is empty, the request-local authentication proxy is ignored: FTP falls back to the fixed filesystem with username anonymous and any password, while S3 with AuthKey serves the fixed RC fs rather than the backend selected by the proxy. The dedicated command-line servers that configure the global option are not affected. This issue is fixed in version 1.75.1.

Back to dashboard
1.5/ 10 priority

Sources & remediation

Other references
Weakness type (CWE)
CWE-863

Priority

LOW

Exploitation

NONE

PoC

YES

Patch

NONE

Momentum

NONE

Threat summary

  • Public PoC is present in monitored signal
  • 1 mentions across 1 observed day

What's happening

  • PoC mentioned or linked in 1 signal
  • Technical details provided in 1 signal
  • 1 total mentions across 1 day

Deep dive

Activity timeline1 mentions / 1d
00111Mentions · 2026-09-11: 1PoC Mentioned / Linked · 2026-09-11: 1Technical Details · 2026-09-11: 109-11
Signal classification1 categories
PoC
1100.0%
Referenced assets1 URL
Full discourse1 post
  • Hephaestvs@Vulcanux_
    PoC

    csirt_it: ‼️ Disponibili #PoC per lo sfruttamento di 5 vulnerabilità presenti in #Rclone Rischio: 🔴 Tipologia: 🔸 Authentication Bypass 🔸 Security Feature Bypass 🔸 Denial of Service 🔗 https://www.acn.gov.it/portale/w/rclone-poc-pubblici-per-lo-sfruttamento-delle-cve-2026-88018-cve-2026-88044-cve-2026-88045-cve-2026-88016-e-cve-2026-88017 ⚠️ Importante mantenere aggiornati i s… https://t.co/hTiluqXiEA

    Post summary

    Il tweet annuncia la disponibilità di Proof of Concept per cinque vulnerabilità Rclone, indicando i tipi di vulnerabilità e fornendo un link a dettagli più approfonditi, senza riferirti a patch o attacchi attivi.

    0000047
    636 followersView on X

Explore more

Back to dashboard