← CVE Intelligence

CVE-2026-3598

RustDesk Server Generates Config Strings Using Reversible Encoding (Base64 + Reverse) Instead of Encryption PUBLISHED

Description (CNA)

Use of a Broken or Risky Cryptographic Algorithm vulnerability in rustdesk-server-pro RustDesk Server Pro rustdesk-server-pro on Windows, MacOS, Linux (Config string generation, web console export modules) allows Retrieve Embedded Sensitive Data. This vulnerability is associated with program routines Config export/generation routines. This issue affects RustDesk Server Pro: through 1.7.5.

Affected (CNA)

Vendor / productVersions
rustdesk-server-pro / RustDesk Server Proaffected 0 through 1.7.5

CWE

CWE-327, CWE-684

References

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.