EUVD-2026-102482

rustdesk-api through 2.7 contains an authorization bypass vulnerability that allows unauthenticated attackers to overwrite existing peer records by supplying only a target device ID to POST /api/sysinfo. Attackers can overwrite hostname, username, OS and uuid without uuid verification, then log i...

CVE-2026-111324

The rustdesk-api through version 2.7 is vulnerable to an authorization bypass via the POST /api/sysinfo endpoint. This flaw allows unauthenticated attackers to overwrite existing peer records, including hostname, username, OS, and uuid , by providing only a target device ID without uuid verificat...