CVE-2026-15682

Name of the Vulnerable Software and Affected Versions AnyDesk (affected versions not specified)

Description A flaw in the Send Support Information feature allows local attackers to create a denial-of-service condition. An attacker must first have the ability to execute low-privileged code on the target system. By creating a junction, which is a filesystem reparse point that redirects file operations, the attacker can trick the service into writing arbitrary files outside their intended location, leading to application crashes. This issue is particularly risky in shared or multi-user environments.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability. Restrict access to the system and monitor for the creation of unusual filesystem junctions to mitigate the risk of exploitation.