Most recent entries from all https://db.gcve.eu Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Wed, 30 Sep 2026 14:48:23 +0000 CVE-2026-79782 — rclone before 1.74.4 Security Token Disclosure via HTTPS to HTTP Redirect https://db.gcve.eu/vuln/cve-2026-79782 <p><strong>Affected:</strong> rclone</p> <p>rclone before 1.74.4 fails to strip the X-Amz-Security-Token header when an S3 redirect changes scheme from HTTPS to HTTP on the same host. Attackers can intercept plaintext HTTP traffic to capture AWS STS session tokens sent in request headers.</p> <p><strong>Affected:</strong> rclone</p> <p>rclone before 1.74.4 fails to strip the X-Amz-Security-Token header when an S3 redirect changes scheme from HTTPS to HTTP on the same host. Attackers can intercept plaintext HTTP traffic to capture AWS STS session tokens sent in request headers.</p> https://db.gcve.eu/vuln/cve-2026-79782