CVE-2023-26509 Denial of service in n/a

What is CVE-2023-26509?

CVE-2023-26509 is a high-severity denial of service vulnerability in n/a, published on 3 Jul 2023. An attacker can exploit it over the internet without logging in, with no action from the victim.

Official description

AnyDesk 7.0.8 allows remote Denial of Service.

Weakness: CWE-400

Which versions are affected by CVE-2023-26509?

It affects 1 product.

Products include Anydesk Anydesk.

How do I fix CVE-2023-26509?

No fix has been published for CVE-2023-26509 yet. Limit exposure of the affected software until one is available.

Upgrade, then put limits on request size, rate and nesting depth so one client cannot exhaust the service. More about Denial of service.

Is CVE-2023-26509 being exploited?

There is no known exploitation of CVE-2023-26509 in the wild and no public exploit code.

Other vulnerabilities in n/a

• CVE-2025-27918 Integer overflow in n/a Critical 9.8
• CVE-2020-13160 Other in n/a Critical 9.8
• CVE-2017-14397 AnyDesk before 3.6.1 on Windows has a DLL injection vulnerability. Critical 9.8
• CVE-2021-44426 File upload in n/a High 8.8
• CVE-2016-20094 AnyDesk 2.5.0 Unquoted Service Path Elevation of Privilege High 8.5

Sources

• CVE record
• NVD
• OSV
• GitHub advisory
• How this page is made

Also known as GHSA-qhhg-f5q2-j9gj.