CVE-2026-109390: falha crítica em AnyDesk
Publicada em · Atualizada em
Aviso por e-mail quando ela entrar no KEV, ganhar PoC pública ou subir de nota.
28Vexday Risk Score
Sem sinal de exploração. Nenhum artefato público de exploração conhecido até agora.
ssvc Trackcvss 9.8epss 1.6%
AnyDesk before 8.0.3 allows unauthenticated remote attackers to execute arbitrary code via a heap-based buffer overflow, as demonstrated on Linux for command execution as root without the victim approving desktop control. In the stream packet handler for mode 5 in the session protocol, a payload length value is not validated.
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Produtos afetados
AnyDesk · AnyDeskCVEs relacionadas — AnyDesk
No mesmo produto, das mais perigosas para as menos.
CVE-2024-12754MEDIUMAnyDesk Link Following Information Disclosure VulnerabilityEPSS 1.2%CVE-2025-34499MEDIUMAnyDesk 9.0.1 Unquoted Service Path Privilege Escalation VulnerabilityEPSS 0.4%CVE-2026-15681MEDIUMAnyDesk Screen Recording Link Following Denial-of-Service VulnerabilityEPSS 0.1%CVE-2026-15682MEDIUMAnyDesk Support Information Link Following Denial-of-Service VulnerabilityEPSS 0.1%