CVE-2026-30793: RustDesk Deep Link Password Overwrite
CVE-2026-30793 (NVD 9.8) is a CSRF flaw in RustDesk clients through 1.4.5 where a deep link can set the permanent password. Update and keep deep links off.
Deep dives, practical guides, and incident analyses from engineers who build Safeguard. No fluff, no vendor FUD — just what you need to ship secure software.
CVE-2026-30793 (NVD 9.8) is a CSRF flaw in RustDesk clients through 1.4.5 where a deep link can set the permanent password. Update and keep deep links off.
CVE-2026-30789 (NVD 9.8) covers RustDesk clients through 1.4.8 whose fast SHA256 password proof allows offline cracking. Use long passwords and update.
CVE-2026-3069 (CVSS 7.3) is a SQL injection in itsourcecode Document Management System 1.0 through field1 in edtlbls.php. No fix named; restrict access.
CVE-2026-3068 (CVSS 7.3) is a SQL injection in itsourcecode Document Management System 1.0 through user2del in deluser.php. Restrict access and audit it.
CVE-2026-3061 (CVSS 9.1) is an out of bounds read in Chrome Media before 145.0.7632.116. Update Chrome to 145.0.7632.116 or later and restart the browser.
CVE-2026-3057 (CVSS 6.3) is a SQL injection in pearProjectApi up to 2.8.10 through projectCode. No fix is named; restrict access and watch the repository.
CVE-2026-3053 (CVSS 7.3) is missing authentication on the OpenAPI endpoint in DataLinkDC Dinky up to 1.2.5. Restrict access and check for a newer release.
CVE-2026-3046 (CVSS 7.3) is a SQL injection in itsourcecode E-Logbook with Health Monitoring System for COVID-19 1.0 via profile_id. Restrict access now.
CVE-2026-3042 (CVSS 7.3) is a SQL injection in itsourcecode Event Management System 1.0 through the ID argument. No fix named; limit access, review code.
Weekly insights on software supply chain security, delivered to your inbox.
Your first fix PR is minutes away.
No sales call required, even your agent can complete the purchase over MCP.