AnyDesk Linux Flaw Lets Remote Attackers Execute Code as Root Without Authentication
A public proof-of-concept targets a patched AnyDesk Linux 8.0.2 flaw that can run commands as root without authentication.
68
Vendor
AnyDesk
- Mentions · 7d0
- Mentions · 30d2
- All mentions8
- First seenAug 11, 2026
- Last mentioned21d ago
Timeline
8 articles · newest firstResearchers Publish Working Exploit for Pre-Auth AnyDesk Linux Flaw That Gives Root Access
Researchers released AnyPwn, a working pre-auth root exploit for AnyDesk Linux before 8.0.3.
67
Hackers Used a Samsung Flaw to Build a Cryptominer Inside Victim Systems
Huntress says attackers used Samsung MagicINFO CVE-2025-4632 on one Windows host to compile a Monero miner.
58
North Korean IT Workers Pay People to Sit Through Job Interviews While They Control the Computer
Silent Push found North Korean IT workers recruiting on-camera proxies for job interviews while remotely controlling the computer, defeating identity and location checks.
60
North Korean IT Workers Use AI and Remote Desktop Tools to Fake Technical Interviews
Silent Push links a Discord recruitment scheme to North Korean IT workers using AI, remote desktop tools and on-camera proxies to pass technical interviews.
60
Attackers Chain Two PaperCut Flaws to Execute Code Without Authentication
Attackers chain PaperCut NG/MF flaws CVE-2026-81578 and CVE-2026-82078 for unauthenticated RCE; exploitation observed and a second emergency patch issued.
80
Attackers plant remote access tools on compromised PaperCut servers
Attackers chained two PaperCut NG/MF zero-days for unauthenticated access, installing SimpleHelp and AnyDesk remote access tools on compromised servers.
78
DeadLock Ransomware Uses Polygon Smart Contracts to Make Extortion Infra Harder to Disrupt
Microsoft reports DeadLock ransomware using Polygon smart contracts and Session messaging for extortion infrastructure, claiming 96 victims across Europe and the U.S.
62
Related CVEs
by mentions- CVE-2026-8207861%9.4Unsafe Reflection RCE in PaperCut NG/MF, Chained with Auth Bypass in Attacks
- CVE-2026-8157884%8.8Missing Authentication for Critical Function in PaperCut NG/MF Web Interface
- CVE-2025-463224%9.8Actively Exploited Path Traversal File Write in Samsung MagicINFO 9 Server
- CVE-2024-739992%9.8Unauthenticated Path Traversal File Write in Samsung MagicINFO 9 Server
- CVE-2025-27918<1%9.8An issue was discovered in AnyDesk for Windows before 9.0.5, AnyDesk for macOS before 9.0.1, AnyDesk for Linux before 7.0.0, AnyDesk for iOS before 7.1.2, and…
Appears with
- AnyDeskproduct · 3
- Silent Pushorganization · 2
- Google Meetproduct · 2
- SimpleHelpvendor · 2
- Huntressorganization · 2
- ChatGPTproduct · 2
- PaperCut NGproduct · 2
- PaperCutvendor · 2
- Huntressvendor · 2
- PaperCut MFproduct · 2
- TeamViewervendor · 2
- watchTowrvendor · 2
- SilentXMRMinermalware · 1
- Windowsproduct · 1
- Lynxthreat actor · 1
- Samsungvendor · 1
Entities are extracted by the model from each article. First seen , last mentioned . Watching keeps it in this browser only (no account); the watchlist page and dashboard alerts use it.