CVE-2026-15681 Detail

Nvd.Nist • July 14, 2026

AnyDesk Screen Recording Link Following Denial-of-Service Vulnerability. This vulnerability allows local attackers to create a denial-of-service condition on affected installations of AnyDesk. An attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability. The specific flaw exists within the handling of screen recording files. By creating a junction, an attacker can abuse the service to create arbitrary files. An attacker can leverage this vulnerability to create a denial-of-service condition on the system. Was ZDI-CAN-26591.

Denotes Vulnerable Software Are we missing a CPE here? Please let us know .

The full story

This article is one source in a clustered incident — the cluster page carries the summary, timeline and every other outlet covering it.

Denial-of-Service Vulnerability in AnyDesk Affects Local Installations A newly disclosed vulnerability, CVE-2026-15681, affects AnyDesk installations, allowing local attackers to create a denial-of-service condition. The flaw arises from improper handling of screen recording files, enabling attackers with low-privileged code execution to create arbitrary files via junctions. This vulnerability has been reported by the Zero Day Initiative (ZDI) and was published on July 13, 2026. The issue was escalated to the vendor's security team, but no resolution was provided, leading ZDI to publish the advisory. The only mitigation strategy suggested is to restrict interaction with the product. This vulnerability poses a significant risk to users of AnyDesk software. 1 sources 55

Extracted Entities

CVE-2026-15681 Detail

The full story

Extracted Entities

Attack Types (1)

CVEs (1)

Tools (1)