MajorCritical vulnerability

CVE-2026-39997 (CVSS 8.9)

NVD · officialPublished Oct 15, 2026Risk 37/100EPSS 0.4%

A missing authentication for critical function vulnerability has been reported to affect HybridDesk Station. If exploited, the vulnerability could allow remote attackers to gain access to the system. We have already fixed the vulnerability in the following version: HybridDesk Station 4.2.22 and later

Technical details

CVSS

8.9

AV:AdjacentAC:LowPR:NoneUI:Passive

Evidence and sources

This record is attributed to NVD. Exploitation status and remediation guidance are kept separate from the vulnerability's technical severity.

Open primary source