CVE-2026-57850

creationtimestamp| type| source ---|---|--- 2026-07-10 21:00:40+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mqd26b42is2l 2026-07-11 02:14:19+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mqdlp4gial27...

CVE-2026-57850

RustDesk before 1.4.9 does not enforce a session's authorized connection scope on the server side, so a peer granted a limited session type FileTransfer, PortForward, ViewCamera, or Terminal can send control messages and login options reserved for a full Remote session. An authenticated remote pe...