CVE-2026-49980 - Rclone: Unauthenticated command execution in `rclone rcd --rc-serve` via inline remote instantiation, bypassing CVE-2026-41179 fix
CVE ID :CVE-2026-49980 Published : June 24, 2026, 5:52 p.m. | 5 hours, 18 minutes ago Description :Rclone is a command-line program to sync files and directories to and from different cloud storage providers. From 1.46.0 until 1.74.3, rclone rcd --rc-serve accepts unauthenticated GET and HEAD...