EUVD-2026-102482

rustdesk-api through 2.7 contains an authorization bypass vulnerability that allows unauthenticated attackers to overwrite existing peer records by supplying only a target device ID to POST /api/sysinfo. Attackers can overwrite hostname, username, OS and uuid without uuid verification, then log i...

CVE-2026-111324

rustdesk-api through 2.7 contains an authorization bypass vulnerability that allows unauthenticated attackers to overwrite existing peer records by supplying only a target device ID to POST /api/sysinfo. Attackers can overwrite hostname, username, OS and uuid without uuid verification, then log i...

CVE-2026-111324 rustdesk-api through 2.7 Authorization Bypass via POST /api/sysinfo

rustdesk-api through 2.7 contains an authorization bypass vulnerability that allows unauthenticated attackers to overwrite existing peer records by supplying only a target device ID to POST /api/sysinfo. Attackers can overwrite hostname, username, OS and uuid without uuid verification, then log i...

CVE-2026-111324

The rustdesk-api through version 2.7 is vulnerable to an authorization bypass via the POST /api/sysinfo endpoint. This flaw allows unauthenticated attackers to overwrite existing peer records, including hostname, username, OS, and uuid , by providing only a target device ID without uuid verificat...

CVE-2026-111324

rustdesk-api through 2.7 contains an authorization bypass vulnerability that allows unauthenticated attackers to overwrite existing peer records by supplying only a target device ID to POST /api/sysinfo. Attackers can overwrite hostname, username, OS and uuid without uuid verification, then log i...

CVE-2026-111324 rustdesk-api through 2.7 Authorization Bypass via POST /api/sysinfo

rustdesk-api through 2.7 contains an authorization bypass vulnerability that allows unauthenticated attackers to overwrite existing peer records by supplying only a target device ID to POST /api/sysinfo. Attackers can overwrite hostname, username, OS and uuid without uuid verification, then log i...

CVE-2026-111324 rustdesk-api through 2.7 Authorization Bypass via POST /api/sysinfo

rustdesk-api through 2.7 contains an authorization bypass vulnerability that allows unauthenticated attackers to overwrite existing peer records by supplying only a target device ID to POST /api/sysinfo. Attackers can overwrite hostname, username, OS and uuid without uuid verification, then log i...

CVE-2026-111324: Authorization Bypass Through User-Controlled Key

rustdesk-api through 2.7 contains an authorization bypass vulnerability that allows unauthenticated attackers to overwrite existing peer records by supplying only a target device ID to POST /api/sysinfo. Attackers can overwrite hostname, username, OS and uuid without uuid verification, then log i...

PT-2026-115282

Name of the Vulnerable Software and Affected Versions rustdesk-api versions prior to 2.8 Description An authorization bypass allows unauthenticated attackers to overwrite existing peer records. By sending a target device ID to the 'POST /api/sysinfo' endpoint, attackers can modify the hostname,...

RustDesk API Admin Detected

RustDesk is a remote access and control software that enables management of computers and other devices. RustDesk API Admin is a RESTful API allowing automation and integration of RustDesk functionality into other systems. By levegaring this service, a remote and unauthenticated attacker could us...

RustDesk API Admin Registration Enabled

RustDesk is a remote access and control software that enables management of computers and other devices. RustDesk API Admin is a RESTful API allowing automation and integration of RustDesk functionality into other systems. The registration is enabled on the target API Admin interface, allowing a...