CVE-2026-39997
HighCVSS 8.9Exploitation Probability (EPSS)
Low risk29th percentile - higher than 29% of all known CVEs
Summary
A missing authentication for critical function vulnerability has been reported to affect HybridDesk Station. If exploited, the vulnerability could allow remote attackers to gain access to the system.
Risk Assessment
Missing authentication for a critical function may allow unauthorized access to the system, posing a serious security threat.
Recommendation
Update HybridDesk Station to version 4.2.22 or later to fix the vulnerability.
Other vulnerabilities in HybridDesk Station
See all- CVE-2026-47786Critical
An OS command injection vulnerability has been reported in HybridDesk Station, which could allow remote attackers to execute arbitrary commands. The vulnerability has been fixed in versions 4.2.23 and 4.3.4 and later.
- CVE-2025-44015High
A command injection vulnerability has been reported in HybridDesk Station. An attacker with local network access can exploit it to execute arbitrary commands.
Original NVD description (English source)
A missing authentication for critical function vulnerability has been reported to affect HybridDesk Station. If exploited, the vulnerability could allow remote attackers to gain access to the system. We have already fixed the vulnerability in the following version: HybridDesk Station 4.2.22 and later
Vulnerability data from NVD (NIST) · CISA KEV · EPSS