Back to CVE List

CVE-2026-15682

MEDIUM SEVERITY

CVSS Score & Metrics

Base Score
4.7 / 10
Vector String
CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H

Vulnerability Description

AnyDesk Support Information Link Following Denial-of-Service Vulnerability. This vulnerability allows local attackers to create a denial-of-service condition on affected installations of AnyDesk. An attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability.

The specific flaw exists within the Send Support Information feature. By creating a junction, an attacker can abuse the service to create arbitrary files. An attacker can leverage this vulnerability to create a denial-of-service condition on the system. Was ZDI-CAN-26645.

Vulnerability Details

Published Date
Last Modified
CWE ID
CWE-59
Source
NVD
Vendor
AnyDesk
Product
AnyDesk

External References

Discussion (0)

Add Comment

No comments yet. Be the first!