CVE-2026-15682 is a local denial-of-service vulnerability in AnyDesk affecting the Send Support Information feature. An attacker who can execute low-privileged code on the target system can exploit a flaw involving junction creation to create arbitrary files, resulting in a denial-of-service condition. The vulnerability is categorized under CWE-59 (Improper Link Resolution Before File Access). The CVSS 3.0 vector indicates low attack complexity and privileges required, with no impact on confidentiality or integrity but high impact on availability.

Successful exploitation results in denial-of-service by disrupting system availability through arbitrary file creation via junction abuse. There is no confidentiality or integrity impact. The attacker must have local low-privileged code execution capabilities to exploit this vulnerability.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is available, restrict local code execution capabilities to trusted users and monitor for suspicious activity related to the Send Support Information feature.