# AnyDesk vulnerabilities Source: https://junglewise.ai/threats/technologies/anydesk Publisher: Junglewise Threat Intelligence, https://junglewise.ai/threats Updated: 12 November 2026, 03:07 UTC. Rebuilt every hour. Data: https://junglewise.ai/threats/technologies/anydesk.json License: CC BY 4.0 with a link back Junglewise Threat Intelligence has tracked 9 vulnerabilities in AnyDesk: 0 in the last 7 days and 1 in the last 90 days, 2 of them critical and 0 exploited in the wild. The most recent, CVE-2026-109390, was published on 12 October 2026. 1 vulnerability in the last four weeks, up from none in the four before. 1 critical against 0. ## Counts - Last 7 days: 0 - Last 30 days: 0 - Last 90 days: 1 - All time: 9 (2 critical, 0 exploited in the wild) ## About AnyDesk A remote desktop application that allows users to access and control computers or other devices across different platforms. ## Latest AnyDesk vulnerabilities - [CVE-2026-109390: AnyDesk heap buffer overflow in session protocol mode 5](https://junglewise.ai/threats/cve-2026-109390-anydesk-before-8-0-3-allows-unauthenticated-remote-attackers-to) (critical, CVSS 9.8, published 12 Oct 2026) - [CVE-2026-15682: AnyDesk link following denial of service in Send Support Information](https://junglewise.ai/threats/cve-2026-15682-anydesk-link-following-denial-of-service-in-send-support) (medium, CVSS 4.7, published 13 Jul 2026) - [CVE-2026-15681: AnyDesk link following denial of service in screen recording](https://junglewise.ai/threats/cve-2026-15681-anydesk-link-following-denial-of-service-in-screen-recording) (medium, CVSS 4.7, published 13 Jul 2026) - [CVE-2016-20094: AnyDesk unquoted service path in AnyDesk Service](https://junglewise.ai/threats/cve-2016-20094-anydesk-unquoted-service-path-in-anydesk-service) (high, CVSS 7.8, published 19 Jun 2026) - [CVE-2019-25261: AnyDesk 5.4.0 contains an unquoted service path vulnerability in its Windows service configuration that allows local…](https://junglewise.ai/threats/cve-2019-25261-anydesk-5-4-0-contains-an-unquoted-service-path-vulnerability-in) (high, CVSS 7.8, published 3 Feb 2026) - [CVE-2025-27919: An issue was discovered in AnyDesk through 9.0.4. A remotely connected user with the "Control my device" permission…](https://junglewise.ai/threats/cve-2025-27919-an-issue-was-discovered-in-anydesk-through-9-0-4-a-remotely) (high, CVSS 8.2, published 6 Nov 2025) - [CVE-2025-27918: An issue was discovered in AnyDesk for Windows before 9.0.5, AnyDesk for macOS before 9.0.1, AnyDesk for Linux before…](https://junglewise.ai/threats/cve-2025-27918-an-issue-was-discovered-in-anydesk-for-windows-before-9-0-5) (critical, CVSS 9.8, published 6 Nov 2025) - [CVE-2025-27917: An issue was discovered in AnyDesk for Windows before 9.0.5, AnyDesk for macOS before 9.0.1, AnyDesk for Linux before…](https://junglewise.ai/threats/cve-2025-27917-an-issue-was-discovered-in-anydesk-for-windows-before-9-0-5) (high, CVSS 7.5, published 6 Nov 2025) - [CVE-2025-27916: An issue was discovered in AnyDesk for Windows before 9.0.6 and AnyDesk for Android before 8.0.0. When the connection…](https://junglewise.ai/threats/cve-2025-27916-an-issue-was-discovered-in-anydesk-for-windows-before-9-0-6-and) (high, CVSS 7.5, published 6 Nov 2025) ## Most severe AnyDesk vulnerabilities - [CVE-2026-109390: AnyDesk heap buffer overflow in session protocol mode 5](https://junglewise.ai/threats/cve-2026-109390-anydesk-before-8-0-3-allows-unauthenticated-remote-attackers-to) (critical, CVSS 9.8, published 12 Oct 2026) - [CVE-2025-27918: An issue was discovered in AnyDesk for Windows before 9.0.5, AnyDesk for macOS before 9.0.1, AnyDesk for Linux before…](https://junglewise.ai/threats/cve-2025-27918-an-issue-was-discovered-in-anydesk-for-windows-before-9-0-5) (critical, CVSS 9.8, published 6 Nov 2025) - [CVE-2025-27919: An issue was discovered in AnyDesk through 9.0.4. A remotely connected user with the "Control my device" permission…](https://junglewise.ai/threats/cve-2025-27919-an-issue-was-discovered-in-anydesk-through-9-0-4-a-remotely) (high, CVSS 8.2, published 6 Nov 2025) - [CVE-2019-25261: AnyDesk 5.4.0 contains an unquoted service path vulnerability in its Windows service configuration that allows local…](https://junglewise.ai/threats/cve-2019-25261-anydesk-5-4-0-contains-an-unquoted-service-path-vulnerability-in) (high, CVSS 7.8, published 3 Feb 2026) - [CVE-2016-20094: AnyDesk unquoted service path in AnyDesk Service](https://junglewise.ai/threats/cve-2016-20094-anydesk-unquoted-service-path-in-anydesk-service) (high, CVSS 7.8, published 19 Jun 2026) - [CVE-2025-27917: An issue was discovered in AnyDesk for Windows before 9.0.5, AnyDesk for macOS before 9.0.1, AnyDesk for Linux before…](https://junglewise.ai/threats/cve-2025-27917-an-issue-was-discovered-in-anydesk-for-windows-before-9-0-5) (high, CVSS 7.5, published 6 Nov 2025) - [CVE-2025-27916: An issue was discovered in AnyDesk for Windows before 9.0.6 and AnyDesk for Android before 8.0.0. When the connection…](https://junglewise.ai/threats/cve-2025-27916-an-issue-was-discovered-in-anydesk-for-windows-before-9-0-6-and) (high, CVSS 7.5, published 6 Nov 2025) - [CVE-2026-15682: AnyDesk link following denial of service in Send Support Information](https://junglewise.ai/threats/cve-2026-15682-anydesk-link-following-denial-of-service-in-send-support) (medium, CVSS 4.7, published 13 Jul 2026) - [CVE-2026-15681: AnyDesk link following denial of service in screen recording](https://junglewise.ai/threats/cve-2026-15681-anydesk-link-following-denial-of-service-in-screen-recording) (medium, CVSS 4.7, published 13 Jul 2026) ## Vulnerabilities per week 1 vulnerability in the last four weeks, up from none in the four before. 1 critical against 0. | Week of | Vulns | Critical | Exploited | | --- | --- | --- | --- | | 17 Aug 2026 | 0 | 0 | 0 | | 24 Aug 2026 | 0 | 0 | 0 | | 31 Aug 2026 | 0 | 0 | 0 | | 7 Sep 2026 | 0 | 0 | 0 | | 14 Sep 2026 | 0 | 0 | 0 | | 21 Sep 2026 | 0 | 0 | 0 | | 28 Sep 2026 | 0 | 0 | 0 | | 5 Oct 2026 | 0 | 0 | 0 | | 12 Oct 2026 | 1 | 1 | 0 | | 19 Oct 2026 | 0 | 0 | 0 | | 26 Oct 2026 | 0 | 0 | 0 | | 2 Nov 2026 | 0 | 0 | 0 | | 9 Nov 2026 | 0 | 0 | 0 | ## Sources NVD, GitHub Security Advisories, OSV, the CISA Known Exploited Vulnerabilities catalog, FIRST EPSS and vendor advisories. Rebuilt every hour. Cite as: Junglewise Threat Intelligence, "AnyDesk vulnerabilities", https://junglewise.ai/threats/technologies/anydesk, 12 November 2026.