EUVD-2026-102482

rustdesk-api through 2.7 contains an authorization bypass vulnerability that allows unauthenticated attackers to overwrite existing peer records by supplying only a target device ID to POST /api/sysinfo. Attackers can overwrite hostname, username, OS and uuid without uuid verification, then log i...

CVE-2026-111324

The rustdesk-api through version 2.7 is vulnerable to an authorization bypass via the POST /api/sysinfo endpoint. This flaw allows unauthenticated attackers to overwrite existing peer records, including hostname, username, OS, and uuid , by providing only a target device ID without uuid verificat...

RustDesk API Admin Registration Enabled

RustDesk is a remote access and control software that enables management of computers and other devices. RustDesk API Admin is a RESTful API allowing automation and integration of RustDesk functionality into other systems. The registration is enabled on the target API Admin interface, allowing a...

RustDesk API Admin Detected

RustDesk is a remote access and control software that enables management of computers and other devices. RustDesk API Admin is a RESTful API allowing automation and integration of RustDesk functionality into other systems. By levegaring this service, a remote and unauthenticated attacker could us...