PT-2026-23449 · Unknown · Rustdesk Server Pro

Erez Kalman · Publicado 2026-03-05 · Atualizado 2026-03-05 · CVE-2026-3598

Positive Technologies (AI Summary)

CVSS v4.0

8.7

Alta

Vetor base

AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N

Name of the Vulnerable Software and Affected Versions RustDesk Server Pro versions through 1.7.5

Description A flaw exists in RustDesk Server Pro related to the use of a broken or risky cryptographic algorithm. This issue impacts Windows, MacOS, and Linux systems, specifically within the configuration string generation and web console export modules. The issue allows for the retrieval of embedded sensitive data through program routines related to configuration export and generation.

Recommendations Update RustDesk Server Pro to a version later than 1.7.5.

Exploit

Correção

Use of a Broken Cryptographic Algorithm

Enumeração de Fraquezas

CWE-327

CWE-684

Identificadores relacionados

CVE-2026-3598

Produtos afetados

Rustdesk Server Pro

Referências · 5

• 🔥 https://docs.google.com/document/d/e/2PACX-1vSds6jjpd38oO_yIAyd1HYtKNUuea-I-ozAPpGhYI7QgAU-QGJ7D8a4rOZVj1vmiUXV1EcdRHf9aZAW/pub · Exploit
• https://rustdesk.com/docs/en/client · Nota
• https://vulsec.org · Nota
• https://t.me/CVEtracker/46451 · Publicação no Telegram
• https://nvd.nist.gov/vuln/detail/CVE-2026-3598 · Nota de Segurança