CVE-2026-15682Disclosure(anydesk / anydesk)

LOWCVSS 5.5 · MEDIUM

Exploit discussion active in current signal (1 latest mentions)

Immediate actions

Patch anydesk anydesk systems immediately
Hunt for exploitation attempts and persistence artifacts
Increase monitoring for publicly documented tradecraft

Recommended action window: High priority (within 72h)

NVD description

AnyDesk Support Information Link Following Denial-of-Service Vulnerability. This vulnerability allows local attackers to create a denial-of-service condition on affected installations of AnyDesk. An attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability. The specific flaw exists within the Send Support Information feature. By creating a junction, an attacker can abuse the service to create arbitrary files. An attacker can leverage this vulnerability to create a denial-of-service condition on the system. Was ZDI-CAN-26645.

anydesk CVEs Back to dashboard

2.0/ 10 priority

Sources & remediation

Vendor / third-party advisories

https://www.zerodayinitiative.com/advisories/ZDI-26-401/

Weakness type (CWE)

CWE-59

Priority

LOW

Exploitation

NONE

PoC

YES

Patch

AVAILABLE

Momentum

STABLE

Are you affected?

If you run products in this scope, you should treat this CVE as relevant to your environment.

anydesk

Threat summary

Public PoC is present in monitored signal
Patch or workaround signal is available
15 mentions across 7 observed days
Momentum state: stable

What's happening

PoC mentioned or linked in 1 signal
Patch or workaround mentioned in 6 signals
Technical details provided in 14 signals
Disclosure: 10 classified signals
General: 2 classified signals
Peaked 5d ago at 5 mentions (2026-07-16); latest day: 1
15 total mentions across 7 days

Affected systems

Vendors

anydesk

Products

anydesk

1 version affected across 1 product

Deep dive

Activity timeline15 mentions / 7d

Signal classification3 categories

Disclosure

1066.7%

Patch

320.0%

General

213.3%

Referenced assets10 URLs

By indicator

Classification over time

Date	Total	Labels

2026-07-15	2	Disclosure2
2026-07-16	5	Disclosure4General1
2026-07-17	2	Disclosure2
2026-07-18	2	Disclosure1Patch1
2026-07-23	2	Patch2
2026-07-28	1	General1
2026-08-05	1	Disclosure1

Full discourse15 posts

Cyber Security News@The_Cyber_News89d
Disclosure
🛡️ A newly disclosed zero-day flaw in AnyDesk, tracked as CVE-2026-15682, allows local attackers to crash affected installations by abusing a core support feature, raising fresh concerns for organizations relying on the remote desktop tool for IT support and access management. The vulnerability resides in AnyDesk's Send Support Information feature, which is designed to help users share diagnostic data with support teams during troubleshooting sessions. By creating a junction, a type of filesystem reparse point that redirects file operations, an attacker can trick the AnyDesk service into writing arbitrary files outside their intended location. #cybersecuritynews
Post summary
This report announces the newly disclosed CVE‑2026‑15682, a zero‑day flaw in AnyDesk’s Send Support Information feature that lets local attackers crash the application via reparse point abuse; no PoC, exploitation evidence, or patch information is provided.
7113238911321.5K
72.8K followersView on X
elhacker.NET@elhackernet88d
Disclosure
Vulnerabilidad 0-day en AnyDesk permite ataques DoS Se ha revelado una vulnerabilidad de día cero en AnyDesk, identificada como CVE-2026-15682. Este fallo permite que atacantes locales provoquen el bloqueo o caída del sistema (Denegación de Servicio) abusando de la función "Send Support Information" https://blog.elhacker.net/2026/07/vulnerabilidad-0-day-en-anydesk-permite.html
Post summary
The blog post announces a new 0-day vulnerability in AnyDesk (CVE-2026-15682) that permits local users to trigger a Denial‑of‑Service by abusing the "Send Support Information" function, but no exploit code, patch, or evidence of active exploitation is discussed.
0440117357.4K
141.7K followersView on X
Rıdvan Yağlı@ridvanyagli88d
Patch
🔴 AnyDesk'te yeni bir 0-day güvenlik açığı (CVE-2026-15682) ortaya çıktı. Açık, "Send Support Information" özelliğinin kötüye kullanılmasıyla hizmet engelleme (DoS) saldırısına yol açabiliyor. İstismar için saldırganın hedef sistemde düşük yetkili kod çalıştırabilmesi gerekiyor. AnyDesk'in yayınlayacağı güvenlik güncellemesinin takip edilmesi ve sistemlerde yerel erişimin sınırlandırılması öneriliyor.
Post summary
A newly disclosed 0‑day CVE‑2026‑15682 in AnyDesk enables DoS via the Send Support Information feature; users are advised to apply the forthcoming update or limit local access to mitigate the risk.
00051513
2.2K followersView on X
Jamaica Cyber Incident Response Team (JaCIRT)@cirtgovjm82d
Patch
🚨 URGENT ADVISORY: A zero-day vulnerability (CVE-2026-15682) affecting AnyDesk could allow local attackers to trigger a Denial-of-Service (DoS) condition. Review the advisory and apply recommended mitigations. 🔗 https://cirt.gov.jm/advisory/anydesk-zero-day-vulnerability-cve-2026-15682-could-allow-local-denial-service-junction #CyberSecurity #AnyDesk #ZeroDay #JaCIRT https://t.co/cFtJovSjmk
Post summary
The advisory highlights a zero‑day DoS vulnerability in AnyDesk and urges users to apply recommended mitigations.
03000317
1.2K followersView on X
TheZDIBugs@TheZDIBugs90d
Disclosure
[ZDI-26-401|CVE-2026-15682] (0Day) AnyDesk Support Information Link Following Denial-of-Service Vulnerability (CVSS 4.7; Credit: Giuliano Sanfins from SiDi (0x_alibabas)) https://www.zerodayinitiative.com/advisories/ZDI-26-401/
Post summary
The post announces a new Zero-Day Denial-of-Service vulnerability (CVE-2026-15682) in AnyDesk, assigns a CVSS score of 4.7, and links to a ZeroDay Initiative advisory for further details.
01011953
5.6K followersView on X
iototsecnews@iototsecnews83d
Patch
AnyDesk のゼロデイ脆弱性 CVE-2026-15682：パッチ適用までの DoS 緩和策とは？ https://iototsecnews.jp/2026/07/16/anydesk-0-day-vulnerability-lets-attackers-trigger-denial-of-service/ リモート操作によるサポート業務などで使用される AnyDesk において、深刻な問題が明らかになりました。この AnyDesk は、ユーザーの支援に欠かせないツールとして多くの現場で導入されているため、悪用された場合の影響が懸念されます。この脆弱性 CVE-2026-15682 が、すでにシステムへの侵入を達成している攻撃者に悪用されると、本来は書き込みが制限されている領域に不正なファイルが作成され、ツールの停止といった障害を招く恐れがあります。対策として、公式のセキュリティ修正情報を確認し、提供され次第、速やかにパッチを適用する必要があります。それまでは、不要なアカウントの権限を厳しく制限する必要があります。 #AnyDesk #CVE202615682 #Vulnerability #ZeroDay
Post summary
The article highlights a zero‑day DoS vulnerability in AnyDesk, urges users to apply official patches immediately, and recommends limiting account privileges until remediation is available.
01001195
501 followersView on X
CERT-PY@CERTpy77d
General
⚠️ Vulnerabilidad en productos AnyDesk ❗ CVE-2026-15682 ➡️ Más info: https://www.cert.gov.py/vulnerabilidad-en-productos-anydesk/ https://t.co/axKEjuOFTr
Post summary
A CVE (CVE-2026-15682) affecting AnyDesk is mentioned, but no additional technical or mitigation information is provided.
00001249
6.7K followersView on X
ThreatWire@ThreatWire_89d
Disclosure
🚨 CVE-2026-15682: A zero-day vulnerability in AnyDesk could allow local attackers to abuse the Send Support Information feature to write files outside their intended location, potentially causing application crashes. #CyberSecurity #CVE #AnyDesk #ZeroDay #ThreatWire
Post summary
The post announces a zero‑day file write vulnerability (CVE‑2026‑15682) in AnyDesk, noting that local attackers could exploit the Send Support Information feature to write files outside their intended location, potentially leading to application crashes.
00010228
174 followersView on X
nu11secur1ty@nu11secur1ty170d
Disclosure
nu11secur1ty: CVE-2026-15682 - AnyDesk 9.0.4 Denial of Service https://www.nu11secur1ty.com/2026/08/cve-2026-15682-anydesk-904-denial-of.html?spref=tw
Post summary
The link announces the discovery of a Denial of Service vulnerability (CVE-2026-15682) affecting AnyDesk 9.0.4, with limited technical detail – it is essentially a disclosure.
00000204
105 followersView on X
Pasquale Pillitteri@pillitterip88d
Disclosure
AnyDesk CVE-2026-15682: the zero-day DoS the vendor won't fix. Local attacker abuses Send Support Information via an NTFS junction to crash the service. Reported in 2025, deemed out of scope, no patch. https://pasqualepillitteri.it/en/news/8363/anydesk-cve-2026-15682-zero-day-dos-en #cybersecurity #AnyDesk #infosec
Post summary
The post announces AnyDesk CVE‑2026‑15682 as a zero‑day DoS that the vendor will not patch, describing its exploitation via NTFS junctions, but no active attacks or exploit code are reported.
00000161
623 followersView on X
Guardian Digital, Inc.@gdlinux89d
General
@The_Cyber_News This is a serious concern. The ability to write arbitrary files by abusing the Send Support Information feature is quite alarming for any organization. Have there been any reports on how widespread exploitation of CVE-2026-15682 has been?
Post summary
The tweet points out that CVE‑2026‑15682 enables arbitrary file writes via the Send Support Information feature and queries whether it is being widely exploited, but it does not mention a PoC, exploit code, patch, or debunking.
00000235
650 followersView on X
TECHEPAGES@techepages89d
Disclosure
⚠️ A new zero-day in AnyDesk (CVE-2026-15682) lets local attackers crash installations by abusing the "Send Support Information" feature — creating a filesystem junction that tricks AnyDesk into writing files outside their intended location. It's a denial-of-service risk, not remote code execution. Key details: 🔹 Requires low-privileged local code execution first — not remotely exploitable out of the box 🔹 Especially risky in shared, multi-user, or partially compromised environments 🔹 Similar to a 2024 flaw where reparse points enabled privilege escalation 🔹 No patch yet — monitor for junction/reparse point creation as a mitigation
Post summary
The tweet discloses a new zero‑day CVE‑2026‑15682 in AnyDesk that allows a local denial‑of‑service via a filesystem junction; no patch exists yet, and no exploitation or PoC is reported.
00000116
23 followersView on X
Ergun Akman@AturcDestek89d
Disclosure
📡 AnyDesk 0-Gün Zafiyeti (CVE-2026-15682): Yerel Saldırganlar Hizmet Durdurma Saldırısı Gerçekleştirebiliyor! https://www.linkedin.com/pulse/anydesk-0-g%25C3%25BCn-zafiyeti-cve-2026-15682-yerel-hizmet-durdurma-akman-dbenf @LinkedIn aracılığıyla
Post summary
AnyDesk Zero-Day (CVE-2026-15682) enables local attackers to shut down services, as announced in a LinkedIn article.
0000066
18 followersView on X
The Daily Tech Feed@dailytechonx89d
Disclosure
A zero-day vulnerability in AnyDesk, CVE-2026-15682, enables local attackers to trigger denial-of-service conditions by exploiting the Send Support Information feature. Organizations should restrict access and monitor for unusual junction creations to mitigate risks. #AnyDesk #ZeroDay #CyberSecurity #DoS #Vulnerability #RemoteAccess https://thedailytechfeed.com/anydesk-zero-day-vulnerability-enables-denial-of-service-attacks/
Post summary
The post announces a zero‑day DoS vulnerability in AnyDesk’s Send Support Information feature, provides mitigation advice, but does not disclose any PoC, exploit code, or evidence of active exploitation.
00000186
539 followersView on X
DailyCVE@dailycve91d
Disclosure
🟠 AnyDesk Support Information Link Following Denial-of-Service Vulnerability (#CVE-2026-15682) - MEDIUM -DC-Jul2026-971 https://dailycve.com/anydesk-support-information-link-following-denial-of-service-vulnerability-cve-2026-15682-medium-dc-jul2026-971/
Post summary
The tweet points to a DailyCVE article announcing a medium‑rated DoS vulnerability (CVE‑2026‑15682) for AnyDesk, but provides no further exploitation or mitigation details.
0000064
219 followersView on X

CPE platform detail1 entries

Part:

Vendor:

Product:

Version:

Target SW:

Target HW:

1 of 1 entries

Part	Vendor	Product	Version	Target SW	Target HW
App	anydesk	anydesk	9.0.4	-	-

Explore more

Back to dashboard anydesk CVEs anydesk vulnerabilities

What researchers are saying

CVE-2026-15682

Cyber Security News[verified]@The_Cyber_NewsDisclosure

This report announces the newly disclosed CVE‑2026‑15682, a zero‑day flaw in AnyDesk’s Send Support Information feature that lets local attackers crash the application via reparse point abuse; no PoC, exploitation evidence, or patch information is provided.

Rıdvan Yağlı[verified]@ridvanyagliPatch

A newly disclosed 0‑day CVE‑2026‑15682 in AnyDesk enables DoS via the Send Support Information feature; users are advised to apply the forthcoming update or limit local access to mitigate the risk.

Guardian Digital, Inc.[verified]@gdlinuxGeneral

The tweet points out that CVE‑2026‑15682 enables arbitrary file writes via the Send Support Information feature and queries whether it is being widely exploited, but it does not mention a PoC, exploit code, patch, or debunking.

TECHEPAGES[verified]@techepagesDisclosure

The tweet discloses a new zero‑day CVE‑2026‑15682 in AnyDesk that allows a local denial‑of‑service via a filesystem junction; no patch exists yet, and no exploitation or PoC is reported.

The Daily Tech Feed[verified]@dailytechonxDisclosure

The post announces a zero‑day DoS vulnerability in AnyDesk’s Send Support Information feature, provides mitigation advice, but does not disclose any PoC, exploit code, or evidence of active exploitation.

elhacker.NET@elhackernetDisclosure

The blog post announces a new 0-day vulnerability in AnyDesk (CVE-2026-15682) that permits local users to trigger a Denial‑of‑Service by abusing the "Send Support Information" function, but no exploit code, patch, or evidence of active exploitation is discussed.

Jamaica Cyber Incident Response Team (JaCIRT)@cirtgovjmPatch

The advisory highlights a zero‑day DoS vulnerability in AnyDesk and urges users to apply recommended mitigations.

TheZDIBugs@TheZDIBugsDisclosure

The post announces a new Zero-Day Denial-of-Service vulnerability (CVE-2026-15682) in AnyDesk, assigns a CVSS score of 4.7, and links to a ZeroDay Initiative advisory for further details.