CVE-2026-39997

HighCVSS 8.9

Published: 15/10/2026(UTC)Translated: 15/10/2026(UTC)NVD NIST

Summary

A missing authentication for critical function vulnerability has been reported to affect HybridDesk Station. If exploited, the vulnerability could allow remote attackers to gain access to the system.

Risk Assessment

Missing authentication for a critical function may allow unauthorized access to the system, posing a serious security threat.

Recommendation

Update HybridDesk Station to version 4.2.22 or later to fix the vulnerability.

Other vulnerabilities in HybridDesk Station

CVE-2026-47786Critical
An OS command injection vulnerability has been reported in HybridDesk Station, which could allow remote attackers to execute arbitrary commands. The vulnerability has been fixed in versions 4.2.23 and 4.3.4 and later.

Original NVD description (English source)

A missing authentication for critical function vulnerability has been reported to affect HybridDesk Station. If exploited, the vulnerability could allow remote attackers to gain access to the system. We have already fixed the vulnerability in the following version: HybridDesk Station 4.2.22 and later

Vulnerability data from NVD (NIST) · CISA KEV · EPSS