AnyDesk 0-Day Vulnerability Lets Attackers Trigger Denial-of-Service

A newly disclosed zero-day (CVE-2026-15682) in AnyDesk’s Send Support Information feature allows an attacker with local low-privilege code execution to create junctions (reparse points) that cause arbitrary file writes outside intended locations and trigger a denial-of-service; organizations are advised to monitor AnyDesk advisories, restrict local code execution, and detect unusual junction/reparse point creation until a patch is available.