Security Advisory

CVE-2026-30784

CVE vulnerability detail — eXtreme Datacenter Security Operations

Published 2026-03-05 15:58:46
Last updated 2026-03-06 10:29:25
Assigner VULSec
State PUBLISHED

Description

Missing Authorization, Missing Authentication for Critical Function vulnerability in rustdesk-server RustDesk Server rustdesk-server, rustdesk-server-pro on hbbs/hbbr on all server platforms (Rendezvous server (hbbs), relay server (hbbr) modules) allows Privilege Abuse. This vulnerability is associated with program files src/rendezvous_server.Rs, src/relay_server.Rs and program routines handle_punch_hole_request(), RegisterPeer handler, relay forwarding. This issue affects RustDesk Server: through 1.7.5, through 1.1.15.