CVE-2026-50575
HighCVSS 7.7Exploitation Probability (EPSS)
Low risk7th percentile - higher than 7% of all known CVEs
Summary
BetterDesk, a remote desktop management solution, versions through 2.3.0 improperly invalidate deleted device identities, allowing an unauthenticated client to replay or spoof a device ID and bypass registration controls. Version 3.0.0-alpha contains a patch. No known workarounds are available.
Risk Assessment
The risk includes the possibility of unauthorized system access by spoofing device identity, which could lead to security breaches and takeover of remote sessions.
Recommendation
It is recommended to update BetterDesk to version 3.0.0-alpha or later, which includes a patch. If not possible, consider restricting access to the system.
Original NVD description (English source)
BetterDesk is a remote desktop management solution. BetterDesk versions through 2.3.0 improperly invalidate deleted device identities, allowing an unauthenticated client to replay or spoof a device ID and bypass registration controls. Version 3.0.0-alpha contains a patch. No known workarounds are available.