On October 30, 2026, TeamViewer shipped version 15.83 to close CVE-2026-111585, an integer overflow (CVSS 8.8) that lets the machine you are helping run code on the technician’s workstation. Support teams should patch immediately and treat every unknown remote host as an attack surface.
On 8 October 2026, a public exploit named AnyPwn made a pre-authentication remote code execution flaw in AnyDesk Linux reliably exploitable: a heap overflow in the session protocol yields root, fixed in 8.0.3 but with no CVE and no security advisory. Update to 8.1.0 and restrict TCP port 7070 in the meantime.
On September 8, 2026, ConnectWise shipped a fix for CVE-2026-84869, a missing authorization (CVSS 9.9) that lets an attacker push and run files on a machine during an active ScreenConnect session without host confirmation. Upgrade the client to version 26.6.5, then audit past sessions and file transfers before remote access becomes the entry point into your fleet.
