AnyDesk Zero-Day Flaw Allows Local Attackers to Trigger System-Wide Denial-of

Gbhackers •Divya • July 17, 2026

A newly disclosed zero-day vulnerability in AnyDesk has the potential to allow a local attacker to trigger a denial-of-service condition by exploiting the remote-access software’s “Send Support Information” feature. The advisory, tracked as ZDI-26-401 and ZDI-CAN-26645, was published by Trend Micro’s Zero Day Initiative (ZDI) on July 8, 2026. The flaw has been assigned CVE-2026-15682 […]

The full story

This article is one source in a clustered incident — the cluster page carries the summary, timeline and every other outlet covering it.

AnyDesk Zero-Day CVE-2026-15682 Allows Local Denial-of-Service Attacks A zero-day vulnerability in AnyDesk, tracked as CVE-2026-15682, was disclosed on July 13, 2026. This flaw allows local attackers to exploit the 'Send Support Information' feature to trigger a denial-of-service condition. Organizations using AnyDesk for remote access and IT support are at risk. The vulnerability was reported by Trend Micro’s Zero Day Initiative on July 8, 2026. Security teams are advised to monitor for potential exploitation. The flaw affects all versions of AnyDesk that utilize this feature. Immediate action is recommended to mitigate risks associated with this vulnerability. 2 sources 71

Extracted Entities

AnyDesk Zero-Day Flaw Allows Local Attackers to Trigger System-Wide Denial-of

The full story

Extracted Entities

Attack Types (1)

CVEs (1)

MITRE ATT&CK (1)

Tools (1)