Tia N.List

Reported by 2 outlets

Public PoC for AnyPwn AnyDesk RCE vulnerability disclosed

new1.0
Why this score
Breadth
1.00 / 2.0 · 2 sources
Authority
1.20 / 2.0 · best outlet weight
Severity
0.50 / 5.0 · CVSS + content signals
Velocity
0.50 / 2.0 · updates in 48h
Pickup speed
0.45 / 0.6 · time to second source
Recency
× 0.28 temporal multiplier
Community
+ 0.00 / 1.5 · reddit signal
Score
1.0 / 10 = base × recency + community
securityonline.infogbhackers.com first seen 2d ago

Analysis

AnyPwn is a heap buffer overflow in AnyDesk Linux 8.0.2 that enables remote command execution before the user approves desktop control, with root privileges because the service runs as root. A public PoC is now disclosed (pre-auth, root access). Patch AnyDesk and monitor for in-the-wild use.

Timeline

  1. original reporting

    Public PoC exploit code for the AnyPwn AnyDesk RCE vulnerability is now disclosed. The pre-auth flaw gives root on AnyDesk Linux 8.0.2. Upda

    securityonline.info · 2d ago · October 12th, 2026

    Public PoC exploit code for the AnyPwn AnyDesk RCE vulnerability is now disclosed. The pre-auth flaw gives root on AnyDesk Linux 8.0.2. Upda

    via Mastodon http://securityonline.info/anydesk-rce-vulnerability-poc-disclosed/?utm_source=mastodon&utm_medium=jetpack_social

  2. update from gbhackers.com

    AnyDesk Vulnerability Allowing Remote Code Execution With Root Privileges

    gbhackers.com · 1d ago · October 12th, 2026

    Security researcher has disclosed a heap buffer overflow vulnerability in AnyDesk Linux version 8.0.2, named AnyPwn. This vulnerability allows remote command execution before the user approves desktop control. Because the AnyDesk service typically runs with root privileges, successful exploitation lets attackers gain root access to the system. We identified the issue using V12, and AnyDesk […] The post AnyDesk Vulnerability Allowing Remote Code Execution With Root Privileges appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform .

Covered in

digest 2026-10-12

Source on GitHub