CVE-2026-111324 | lejianwen rustdesk-api up to 2.7 Sysinfo Endpoint /api/sysinfo target device ID authorization

October 15, 2026 Yanac

A vulnerability was found in lejianwen rustdesk-api up to 2.7 and classified as critical. Affected by this vulnerability is an unknown functionality of the file /api/sysinfo of the component Sysinfo Endpoint. Executing a manipulation of the argument target device ID can lead to authorization bypass.

This vulnerability is registered as CVE-2026-111324. It is possible to launch the attack remotely. No exploit is available.VulDB Recent EntriesRead More