CVE-2025-27916

High · 7.5

CVSS

7.5

EPSS

0.3%

Published

Nov 6, 2025

CISA due date

—

The record

An issue was discovered in AnyDesk for Windows before 9.0.6 and AnyDesk for Android before 8.0.0. When the connection between two clients is established via an IP address, it is possible to manipulate the data and spoof the AnyDesk ID.

Affected packages

Ecosystem	Package	Introduced	Fixed