{"id":14147,"date":"2026-10-19T15:49:29","date_gmt":"2026-10-19T13:49:29","guid":{"rendered":"https:\/\/www.infordisa.com\/soc\/?p=14147"},"modified":"2026-10-19T15:54:13","modified_gmt":"2026-10-19T13:54:13","slug":"vulnerabilidad-critica-anydesk-linux","status":"publish","type":"post","link":"https:\/\/www.infordisa.com\/soc\/vulnerabilidad-critica-anydesk-linux\/","title":{"rendered":"Vulnerabilidad cr\u00edtica de AnyDesk para Linux"},"content":{"rendered":"<div data-elementor-type=\"wp-post\" data-elementor-id=\"14147\" class=\"elementor elementor-14147\" data-elementor-post-type=\"post\">\n\t\t\t\t\t\t<section class=\"elementor-section elementor-top-section elementor-element elementor-element-6a9f9a4 elementor-section-boxed elementor-section-height-default elementor-section-height-default\" data-id=\"6a9f9a4\" data-element_type=\"section\" data-e-type=\"section\">\n\t\t\t\t\t\t<div class=\"elementor-container elementor-column-gap-default\">\n\t\t\t\t\t<div class=\"elementor-column elementor-col-100 elementor-top-column elementor-element elementor-element-4d6033d\" data-id=\"4d6033d\" data-element_type=\"column\" data-e-type=\"column\">\n\t\t\t<div class=\"elementor-widget-wrap elementor-element-populated\">\n\t\t\t\t\t\t<div class=\"elementor-element elementor-element-065ace2 elementor-widget elementor-widget-shortcode\" data-id=\"065ace2\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"shortcode.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t\t\t<div class=\"elementor-shortcode\"><span style=\"color: #c02b23;font-weight: bold\">Cr&iacute;tica <\/span><img loading=\"lazy\" decoding=\"async\" width=\"10\" height=\"10\" src=\"https:\/\/www.infordisa.com\/soc\/imgs\/alerta-5.png\" alt=\"Alerta 5\"\/><\/div>\n\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-1fdb308 elementor-widget elementor-widget-text-editor\" data-id=\"1fdb308\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"text-editor.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t\t\t\t\t<div><strong><a href=\"https:\/\/nvd.nist.gov\/vuln\/detail\/cve-2026-109390\" target=\"_blank\" rel=\"noopener\">CVE-2026-109390<\/a><\/strong><\/div>\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-0593216 elementor-widget-divider--view-line elementor-widget elementor-widget-divider\" data-id=\"0593216\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"divider.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t\t\t<div class=\"elementor-divider\">\n\t\t\t<span class=\"elementor-divider-separator\">\n\t\t\t\t\t\t<\/span>\n\t\t<\/div>\n\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-a779dc8 elementor-toc--content-ellipsis elementor-toc--minimized-on-mobile elementor-widget elementor-widget-table-of-contents\" data-id=\"a779dc8\" data-element_type=\"widget\" data-e-type=\"widget\" data-settings='{\"headings_by_tags\":[\"h2\"],\"exclude_headings_by_selector\":[],\"marker_view\":\"bullets\",\"icon\":{\"value\":\"fas fa-chevron-right\",\"library\":\"fa-solid\"},\"no_headings_message\":\"No se ha encontrado ning\\u00fan encabezado en esta p\\u00e1gina.\",\"minimized_on\":\"mobile\",\"minimize_box\":\"yes\",\"hierarchical_view\":\"yes\",\"min_height\":{\"unit\":\"px\",\"size\":\"\",\"sizes\":[]},\"min_height_tablet\":{\"unit\":\"px\",\"size\":\"\",\"sizes\":[]},\"min_height_mobile\":{\"unit\":\"px\",\"size\":\"\",\"sizes\":[]}}' data-widget_type=\"table-of-contents.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t\t\t\t\t<div class=\"elementor-toc__header\">\n\t\t\t\t\t\t<h4 class=\"elementor-toc__header-title\">\n\t\t\t\tTabla de contenidos\t\t\t<\/h4>\n\t\t\t\t\t\t\t\t\t\t<div class=\"elementor-toc__toggle-button elementor-toc__toggle-button--expand\" role=\"button\" tabindex=\"0\" aria-controls=\"elementor-toc__a779dc8\" aria-expanded=\"true\" aria-label=\"Abrir la tabla de contenidos\"><i aria-hidden=\"true\" class=\"fas fa-chevron-down\"><\/i><\/div>\n\t\t\t\t<div class=\"elementor-toc__toggle-button elementor-toc__toggle-button--collapse\" role=\"button\" tabindex=\"0\" aria-controls=\"elementor-toc__a779dc8\" aria-expanded=\"true\" aria-label=\"Cerrar la tabla de contenidos\"><i aria-hidden=\"true\" class=\"fas fa-chevron-up\"><\/i><\/div>\n\t\t\t\t\t<\/div>\n\t\t\t\t<div id=\"elementor-toc__a779dc8\" class=\"elementor-toc__body\">\n\t\t\t<div class=\"elementor-toc__spinner-container\">\n\t\t\t\t<i class=\"elementor-toc__spinner eicon-animation-spin eicon-loading\" aria-hidden=\"true\"><\/i>\t\t\t<\/div>\n\t\t<\/div>\n\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-7041545 elementor-widget elementor-widget-text-editor\" data-id=\"7041545\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"text-editor.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t\t\t\t\t<h2>Resumen<\/h2><p>AnyDesk ha publicado un aviso de seguridad sobre una <a class=\"glossaryLink\" href=\"https:\/\/www.infordisa.com\/soc\/glosario-definicion\/vulnerabilidad\/\" data-gt-translate-attributes='[{\"attribute\":\"data-cmtooltip\", \"format\":\"html\"}]' tabindex=\"0\" role=\"link\">vulnerabilidad<\/a> cr&iacute;tica en su cliente para Linux. Un atacante remoto&nbsp;<strong>sin <a class=\"glossaryLink\" href=\"https:\/\/www.infordisa.com\/soc\/glosario-definicion\/autenticacion\/\" data-gt-translate-attributes='[{\"attribute\":\"data-cmtooltip\", \"format\":\"html\"}]' tabindex=\"0\" role=\"link\">autenticaci&oacute;n<\/a><\/strong>, con conexi&oacute;n de red directa al equipo, puede&nbsp;<strong>ejecutar c&oacute;digo arbitrario con privilegios de root<\/strong>&nbsp;cuando AnyDesk se ejecuta como servicio del sistema.&nbsp;<strong>No hace falta ninguna interacci&oacute;n del usuario<\/strong>: la v&iacute;ctima no tiene que aceptar la conexi&oacute;n.<\/p><p>Desde el 8 de octubre de 2026 circula una prueba de concepto p&uacute;blica, llamada &laquo;AnyPwn&raquo;, que funciona. Por eso el riesgo de que se empiece a explotar a corto plazo es elevado.<\/p><h2>Productos afectados<\/h2><table><thead><tr><th>Plataforma<\/th><th>Versiones afectadas<\/th><th>Versi&oacute;n corregida<\/th><\/tr><\/thead><tbody><tr><td><strong>Linux<\/strong><\/td><td>8.0.0 a 8.0.2<\/td><td><strong>8.0.3 o posterior<\/strong>&nbsp;(actual: 8.1.0)<\/td><\/tr><tr><td>Windows<\/td><td>Precauci&oacute;n*<\/td><td>9.7.8 o posterior<\/td><\/tr><tr><td>macOS<\/td><td>Precauci&oacute;n*<\/td><td>9.7.2 o posterior<\/td><\/tr><\/tbody><\/table><p><em>* Seg&uacute;n el fabricante, el fallo tambi&eacute;n existe en el c&oacute;digo de Windows y macOS, pero no se conoce ninguna forma de explotarlo en esas plataformas. Aun as&iacute;, recomienda actualizarlas como precauci&oacute;n.<\/em><\/p><h2>Detalles t&eacute;cnicos<\/h2><ul><li><strong>Tipo:<\/strong>&nbsp;<a class=\"glossaryLink\" href=\"https:\/\/www.infordisa.com\/soc\/glosario-definicion\/desbordamiento-de-bufer\/\" data-gt-translate-attributes='[{\"attribute\":\"data-cmtooltip\", \"format\":\"html\"}]' tabindex=\"0\" role=\"link\">desbordamiento de b&uacute;fer<\/a> en el heap antes de la autenticaci&oacute;n (CWE-130, manejo incorrecto del campo de longitud).<\/li><li><strong>Origen:<\/strong>&nbsp;el gestor de paquetes de flujo del modo 5 del <a class=\"glossaryLink\"  href=\"https:\/\/www.infordisa.com\/soc\/glosario-definicion\/protocolo\/\"  data-gt-translate-attributes='[{\"attribute\":\"data-cmtooltip\", \"format\":\"html\"}]' tabindex='0' role='link'>protocolo<\/a> de sesi&oacute;n suma una cabecera fija de 16 bytes a la longitud que env&iacute;a el atacante. La suma se hace en aritm&eacute;tica de 32 bits sin controlar el desbordamiento. Con un valor cercano al m&aacute;ximo, el resultado da cero: se reserva un b&uacute;fer diminuto pero el programa sigue tratando el objeto con su tama&ntilde;o original, y eso corrompe la memoria.<\/li><li><strong>Vector:<\/strong>&nbsp;conexi&oacute;n TCP directa al servicio de AnyDesk (<code>anydesk --service<\/code>, que se ejecuta como root) en el&nbsp;<strong>puerto por defecto TCP 7070<\/strong>. No se ha demostrado que se pueda explotar a trav&eacute;s de los relays de AnyDesk.<\/li><li><strong>Exposici&oacute;n:<\/strong>&nbsp;Censys detecta m&aacute;s de 175.000 equipos con AnyDesk accesible en el puerto 7070 desde Internet. La cifra incluye todas las versiones y sistemas operativos, as&iacute; que no todos son vulnerables.<\/li><\/ul><h2>Cronolog&iacute;a<\/h2><table><thead><tr><th>Fecha<\/th><th>Hito<\/th><\/tr><\/thead><tbody><tr><td>22\/06\/2026<\/td><td>Se comunica el fallo<\/td><\/tr><tr><td>23\/06\/2026<\/td><td>AnyDesk publica la versi&oacute;n 8.0.3, que solo describe la correcci&oacute;n como un &laquo;crash <a class=\"glossaryLink\"  href=\"https:\/\/www.infordisa.com\/soc\/glosario-definicion\/bug\/\"  data-gt-translate-attributes='[{\"attribute\":\"data-cmtooltip\", \"format\":\"html\"}]' tabindex='0' role='link'>bug<\/a>&raquo;, sin <a class=\"glossaryLink\"  href=\"https:\/\/www.infordisa.com\/soc\/glosario-definicion\/cve\/\"  data-gt-translate-attributes='[{\"attribute\":\"data-cmtooltip\", \"format\":\"html\"}]' tabindex='0' role='link'>CVE<\/a><\/td><\/tr><tr><td>08\/10\/2026<\/td><td>Se publica la PoC &laquo;AnyPwn&raquo;<\/td><\/tr><tr><td>12\/10\/2026<\/td><td>Se asigna el identificador CVE-2026-109390<\/td><\/tr><tr><td>16\/10\/2026<\/td><td>AnyDesk env&iacute;a el aviso de seguridad a sus clientes<\/td><\/tr><\/tbody><\/table><h2>Acciones recomendadas<\/h2><h4>1. Actualizar de inmediato (prioridad m&aacute;xima)<\/h4><ul><li>Linux: versi&oacute;n&nbsp;<strong>8.0.3 o posterior<\/strong>.<\/li><li>Windows: 9.7.8 o posterior. macOS: 9.7.2 o posterior.<\/li><li>Descargar AnyDesk solo desde la web oficial:&nbsp;<a href=\"https:\/\/anydesk.com\/downloads\" target=\"_blank\" rel=\"noopener\">https:\/\/anydesk.com\/downloads<\/a><\/li><\/ul><h4>2. Comprobar la versi&oacute;n y si el servicio est&aacute; expuesto (Linux)<\/h4><pre><code>anydesk --version\nss -tlnp | grep 7070<\/code><\/pre><h4>3. Mitigaciones temporales, si no se puede actualizar ya<\/h4><p>Estas medidas reducen la exposici&oacute;n pero no corrigen la vulnerabilidad:<\/p><ul><li>Bloquear en el <a class=\"glossaryLink\"  href=\"https:\/\/www.infordisa.com\/soc\/glosario-definicion\/firewall\/\"  data-gt-translate-attributes='[{\"attribute\":\"data-cmtooltip\", \"format\":\"html\"}]' tabindex='0' role='link'>firewall<\/a> perimetral el tr&aacute;fico entrante al&nbsp;<strong>puerto TCP 7070<\/strong>&nbsp;desde redes no confiables.<\/li><li>Desactivar &laquo;Permitir conexiones directas&raquo; en&nbsp;<em>Ajustes &gt; Aplicaci&oacute;n &gt; Conexi&oacute;n &gt; General<\/em>. As&iacute; las sesiones pasan por los relays de AnyDesk.<\/li><li>Permitir conexiones de AnyDesk solo desde or&iacute;genes de confianza (lista de control de acceso).<\/li><\/ul><h4>4. Detecci&oacute;n<\/h4><ul><li>Revisar si ha habido conexiones entrantes an&oacute;malas al puerto 7070 y ca&iacute;das inesperadas del servicio de AnyDesk, que pueden ser intentos de explotaci&oacute;n fallidos.<\/li><li>Consultar los indicadores de compromiso que publica el fabricante en el&nbsp;<strong>AnyDesk Trust Center<\/strong>&nbsp;y que ir&aacute; actualizando.<\/li><\/ul><h2>&iquest;Necesitas ayuda?<\/h2><p>Si usas AnyDesk en tu empresa y no sabes si est&aacute;s afectado, el equipo de soporte de Infordisa puede revisar tus equipos y aplicar la actualizaci&oacute;n o las mitigaciones.<\/p><h3>Referencias<\/h3><ul><li><a href=\"https:\/\/censys.com\/advisory\/cve-2026-109390\/\" target=\"_blank\" rel=\"noopener\">Censys: CVE-2026-109390 Advisory<\/a><\/li><li><a href=\"https:\/\/labs.beazley.security\/advisories\/BSL-A1228\" target=\"_blank\" rel=\"noopener\">Beazley Security Labs: BSL-A1228<\/a><\/li><li><a href=\"https:\/\/aviatrix.ai\/threat-research-center\/anydesk-linux-pre-auth-rce-anypwn-exploit-2026\/\" target=\"_blank\" rel=\"noopener\">Aviatrix Threat Research: AnyPwn<\/a><\/li><li><a href=\"https:\/\/www.skshieldus.com\/security-insights\/trends\/eqstnow-anydesk-rce-cve-2026-109390\" target=\"_blank\" rel=\"noopener\">SK shieldus EQST: AnyDesk RCE<\/a><\/li><\/ul>\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t<\/section>\n\t\t\t\t<\/div>\n\t\t","protected":false},"excerpt":{"rendered":"<p>Ejecuci&oacute;n remota de c&oacute;digo sin <a class=\"glossaryLink\" href=\"https:\/\/www.infordisa.com\/soc\/glosario-definicion\/autenticacion\/\" data-gt-translate-attributes='[{\"attribute\":\"data-cmtooltip\", \"format\":\"html\"}]' tabindex=\"0\" role=\"link\">autenticaci&oacute;n<\/a> en AnyDesk para Linux (<a class=\"glossaryLink\"  href=\"https:\/\/www.infordisa.com\/soc\/glosario-definicion\/cve\/\"  data-gt-translate-attributes='[{\"attribute\":\"data-cmtooltip\", \"format\":\"html\"}]' tabindex='0' role='link'>CVE<\/a>-2026-109390, &ldquo;AnyPwn&rdquo;)<\/p>\n","protected":false},"author":2,"featured_media":0,"comment_status":"closed","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"_acf_changed":false,"inline_featured_image":false,"footnotes":""},"categories":[4],"tags":[147],"class_list":["post-14147","post","type-post","status-publish","format-standard","hentry","category-alertas-de-seguridad","tag-vulnerabilidad","masonry-post","generate-columns","tablet-grid-50","mobile-grid-100","grid-parent","grid-25"],"acf":[],"yoast_head":"<title>Vulnerabilidad cr\u00edtica de AnyDesk para Linux - INFORDISA \/ Security Operations Center<\/title>\n<meta name=\"description\" content=\"Ejecuci\u00f3n remota de c\u00f3digo sin autenticaci\u00f3n en AnyDesk para Linux (CVE-2026-109390, \u201cAnyPwn\u201d)\" \/>\n<meta name=\"robots\" content=\"index, follow, max-snippet:-1, max-image-preview:large, max-video-preview:-1\" \/>\n<link rel=\"canonical\" href=\"https:\/\/www.infordisa.com\/soc\/vulnerabilidad-critica-anydesk-linux\/\" \/>\n<meta property=\"og:locale\" content=\"es_ES\" \/>\n<meta property=\"og:type\" content=\"article\" \/>\n<meta property=\"og:title\" content=\"Vulnerabilidad cr\u00edtica de AnyDesk para Linux - INFORDISA \/ Security Operations Center\" \/>\n<meta property=\"og:description\" content=\"Ejecuci\u00f3n remota de c\u00f3digo sin autenticaci\u00f3n en AnyDesk para Linux (CVE-2026-109390, \u201cAnyPwn\u201d)\" \/>\n<meta property=\"og:url\" content=\"https:\/\/www.infordisa.com\/soc\/vulnerabilidad-critica-anydesk-linux\/\" \/>\n<meta property=\"og:site_name\" content=\"INFORDISA \/ Security Operations Center\" \/>\n<meta property=\"article:publisher\" content=\"https:\/\/www.facebook.com\/infordisa\/\" \/>\n<meta property=\"article:published_time\" content=\"2026-10-19T13:49:29+00:00\" \/>\n<meta property=\"article:modified_time\" content=\"2026-10-19T13:54:13+00:00\" \/>\n<meta property=\"og:image\" content=\"https:\/\/www.infordisa.com\/soc\/wp-content\/uploads\/2026\/10\/alerta-SOC.jpg\" \/>\n\t<meta property=\"og:image:width\" content=\"1200\" \/>\n\t<meta property=\"og:image:height\" content=\"630\" \/>\n\t<meta property=\"og:image:type\" content=\"image\/jpeg\" \/>\n<meta name=\"author\" content=\"Jordi Sala\" \/>\n<meta name=\"twitter:card\" content=\"summary_large_image\" \/>\n<meta name=\"twitter:image\" content=\"https:\/\/www.infordisa.com\/soc\/wp-content\/uploads\/2026\/10\/alerta-SOC.jpg\" \/>\n<meta name=\"twitter:creator\" content=\"@infordisa\" \/>\n<meta name=\"twitter:site\" content=\"@infordisa\" \/>\n<meta name=\"twitter:label1\" content=\"Escrito por\" \/>\n\t<meta name=\"twitter:data1\" content=\"Jordi Sala\" \/>\n\t<meta name=\"twitter:label2\" content=\"Tiempo de lectura\" \/>\n\t<meta name=\"twitter:data2\" content=\"3 minutos\" \/>\n<script type=\"application\/ld+json\" class=\"yoast-schema-graph\">{\"@context\":\"https:\\\/\\\/schema.org\",\"@graph\":[{\"@type\":\"Article\",\"@id\":\"https:\\\/\\\/www.infordisa.com\\\/soc\\\/vulnerabilidad-critica-anydesk-linux\\\/#article\",\"isPartOf\":{\"@id\":\"https:\\\/\\\/www.infordisa.com\\\/soc\\\/vulnerabilidad-critica-anydesk-linux\\\/\"},\"author\":{\"name\":\"Jordi Sala\",\"@id\":\"https:\\\/\\\/www.infordisa.com\\\/soc\\\/#\\\/schema\\\/person\\\/9e7088b9a88f62117d466d94479b2375\"},\"headline\":\"Vulnerabilidad cr\u00edtica de AnyDesk para Linux\",\"datePublished\":\"2026-10-19T13:49:29+00:00\",\"dateModified\":\"2026-10-19T13:54:13+00:00\",\"mainEntityOfPage\":{\"@id\":\"https:\\\/\\\/www.infordisa.com\\\/soc\\\/vulnerabilidad-critica-anydesk-linux\\\/\"},\"wordCount\":599,\"publisher\":{\"@id\":\"https:\\\/\\\/www.infordisa.com\\\/soc\\\/#organization\"},\"keywords\":[\"Vulnerabilidad\"],\"articleSection\":[\"Alertas de seguridad\"],\"inLanguage\":\"es\"},{\"@type\":\"WebPage\",\"@id\":\"https:\\\/\\\/www.infordisa.com\\\/soc\\\/vulnerabilidad-critica-anydesk-linux\\\/\",\"url\":\"https:\\\/\\\/www.infordisa.com\\\/soc\\\/vulnerabilidad-critica-anydesk-linux\\\/\",\"name\":\"Vulnerabilidad cr\u00edtica de AnyDesk para Linux - INFORDISA \\\/ Security Operations Center\",\"isPartOf\":{\"@id\":\"https:\\\/\\\/www.infordisa.com\\\/soc\\\/#website\"},\"datePublished\":\"2026-10-19T13:49:29+00:00\",\"dateModified\":\"2026-10-19T13:54:13+00:00\",\"description\":\"Ejecuci\u00f3n remota de c\u00f3digo sin autenticaci\u00f3n en AnyDesk para Linux (CVE-2026-109390, \u201cAnyPwn\u201d)\",\"breadcrumb\":{\"@id\":\"https:\\\/\\\/www.infordisa.com\\\/soc\\\/vulnerabilidad-critica-anydesk-linux\\\/#breadcrumb\"},\"inLanguage\":\"es\",\"potentialAction\":[{\"@type\":\"ReadAction\",\"target\":[\"https:\\\/\\\/www.infordisa.com\\\/soc\\\/vulnerabilidad-critica-anydesk-linux\\\/\"]}]},{\"@type\":\"BreadcrumbList\",\"@id\":\"https:\\\/\\\/www.infordisa.com\\\/soc\\\/vulnerabilidad-critica-anydesk-linux\\\/#breadcrumb\",\"itemListElement\":[{\"@type\":\"ListItem\",\"position\":1,\"name\":\"Portada\",\"item\":\"https:\\\/\\\/www.infordisa.com\\\/soc\\\/\"},{\"@type\":\"ListItem\",\"position\":2,\"name\":\"Vulnerabilidad cr\u00edtica de AnyDesk para Linux\"}]},{\"@type\":\"WebSite\",\"@id\":\"https:\\\/\\\/www.infordisa.com\\\/soc\\\/#website\",\"url\":\"https:\\\/\\\/www.infordisa.com\\\/soc\\\/\",\"name\":\"INFORDISA \\\/ Security Operations Center\",\"description\":\"Portal de Ciberseguridad\",\"publisher\":{\"@id\":\"https:\\\/\\\/www.infordisa.com\\\/soc\\\/#organization\"},\"potentialAction\":[{\"@type\":\"SearchAction\",\"target\":{\"@type\":\"EntryPoint\",\"urlTemplate\":\"https:\\\/\\\/www.infordisa.com\\\/soc\\\/?s={search_term_string}\"},\"query-input\":{\"@type\":\"PropertyValueSpecification\",\"valueRequired\":true,\"valueName\":\"search_term_string\"}}],\"inLanguage\":\"es\"},{\"@type\":\"Organization\",\"@id\":\"https:\\\/\\\/www.infordisa.com\\\/soc\\\/#organization\",\"name\":\"INFORDISA \\\/ Security Operations Center\",\"url\":\"https:\\\/\\\/www.infordisa.com\\\/soc\\\/\",\"logo\":{\"@type\":\"ImageObject\",\"inLanguage\":\"es\",\"@id\":\"https:\\\/\\\/www.infordisa.com\\\/soc\\\/#\\\/schema\\\/logo\\\/image\\\/\",\"url\":\"https:\\\/\\\/www.infordisa.com\\\/soc\\\/wp-content\\\/uploads\\\/2021\\\/11\\\/logo-securityoperationscenter.png\",\"contentUrl\":\"https:\\\/\\\/www.infordisa.com\\\/soc\\\/wp-content\\\/uploads\\\/2021\\\/11\\\/logo-securityoperationscenter.png\",\"width\":400,\"height\":34,\"caption\":\"INFORDISA \\\/ Security Operations Center\"},\"image\":{\"@id\":\"https:\\\/\\\/www.infordisa.com\\\/soc\\\/#\\\/schema\\\/logo\\\/image\\\/\"},\"sameAs\":[\"https:\\\/\\\/www.facebook.com\\\/infordisa\\\/\",\"https:\\\/\\\/x.com\\\/infordisa\",\"https:\\\/\\\/www.linkedin.com\\\/company\\\/infordisa\",\"https:\\\/\\\/www.youtube.com\\\/user\\\/InfordisaTV\",\"https:\\\/\\\/www.instagram.com\\\/infordisa\\\/\"]},{\"@type\":\"Person\",\"@id\":\"https:\\\/\\\/www.infordisa.com\\\/soc\\\/#\\\/schema\\\/person\\\/9e7088b9a88f62117d466d94479b2375\",\"name\":\"Jordi Sala\",\"image\":{\"@type\":\"ImageObject\",\"inLanguage\":\"es\",\"@id\":\"https:\\\/\\\/secure.gravatar.com\\\/avatar\\\/8c54ab66e828adf2561016ace1f387fbc25b3e9bb35a24b65c0d3cb64e309c28?s=96&r=g\",\"url\":\"https:\\\/\\\/secure.gravatar.com\\\/avatar\\\/8c54ab66e828adf2561016ace1f387fbc25b3e9bb35a24b65c0d3cb64e309c28?s=96&r=g\",\"contentUrl\":\"https:\\\/\\\/secure.gravatar.com\\\/avatar\\\/8c54ab66e828adf2561016ace1f387fbc25b3e9bb35a24b65c0d3cb64e309c28?s=96&r=g\",\"caption\":\"Jordi Sala\"},\"description\":\"Marketing\",\"sameAs\":[\"https:\\\/\\\/www.infordisa.com\\\/soc\\\/\"],\"url\":\"https:\\\/\\\/www.infordisa.com\\\/soc\\\/author\\\/jsala\\\/\"}]}<\/script>","yoast_head_json":{"title":"Vulnerabilidad cr\u00edtica de AnyDesk para Linux - INFORDISA \/ Security Operations Center","description":"Ejecuci\u00f3n remota de c\u00f3digo sin autenticaci\u00f3n en AnyDesk para Linux (CVE-2026-109390, \u201cAnyPwn\u201d)","robots":{"index":"index","follow":"follow","max-snippet":"max-snippet:-1","max-image-preview":"max-image-preview:large","max-video-preview":"max-video-preview:-1"},"canonical":"https:\/\/www.infordisa.com\/soc\/vulnerabilidad-critica-anydesk-linux\/","og_locale":"es_ES","og_type":"article","og_title":"Vulnerabilidad cr\u00edtica de AnyDesk para Linux - INFORDISA \/ Security Operations Center","og_description":"Ejecuci\u00f3n remota de c\u00f3digo sin autenticaci\u00f3n en AnyDesk para Linux (CVE-2026-109390, \u201cAnyPwn\u201d)","og_url":"https:\/\/www.infordisa.com\/soc\/vulnerabilidad-critica-anydesk-linux\/","og_site_name":"INFORDISA \/ Security Operations Center","article_publisher":"https:\/\/www.facebook.com\/infordisa\/","article_published_time":"2026-10-19T13:49:29+00:00","article_modified_time":"2026-10-19T13:54:13+00:00","og_image":[{"width":1200,"height":630,"url":"https:\/\/www.infordisa.com\/soc\/wp-content\/uploads\/2026\/10\/alerta-SOC.jpg","type":"image\/jpeg"}],"author":"Jordi Sala","twitter_card":"summary_large_image","twitter_image":"https:\/\/www.infordisa.com\/soc\/wp-content\/uploads\/2026\/10\/alerta-SOC.jpg","twitter_creator":"@infordisa","twitter_site":"@infordisa","twitter_misc":{"Escrito por":"Jordi Sala","Tiempo de lectura":"3 minutos"},"schema":{"@context":"https:\/\/schema.org","@graph":[{"@type":"Article","@id":"https:\/\/www.infordisa.com\/soc\/vulnerabilidad-critica-anydesk-linux\/#article","isPartOf":{"@id":"https:\/\/www.infordisa.com\/soc\/vulnerabilidad-critica-anydesk-linux\/"},"author":{"name":"Jordi Sala","@id":"https:\/\/www.infordisa.com\/soc\/#\/schema\/person\/9e7088b9a88f62117d466d94479b2375"},"headline":"Vulnerabilidad cr\u00edtica de AnyDesk para Linux","datePublished":"2026-10-19T13:49:29+00:00","dateModified":"2026-10-19T13:54:13+00:00","mainEntityOfPage":{"@id":"https:\/\/www.infordisa.com\/soc\/vulnerabilidad-critica-anydesk-linux\/"},"wordCount":599,"publisher":{"@id":"https:\/\/www.infordisa.com\/soc\/#organization"},"keywords":["Vulnerabilidad"],"articleSection":["Alertas de seguridad"],"inLanguage":"es"},{"@type":"WebPage","@id":"https:\/\/www.infordisa.com\/soc\/vulnerabilidad-critica-anydesk-linux\/","url":"https:\/\/www.infordisa.com\/soc\/vulnerabilidad-critica-anydesk-linux\/","name":"Vulnerabilidad cr\u00edtica de AnyDesk para Linux - INFORDISA \/ Security Operations Center","isPartOf":{"@id":"https:\/\/www.infordisa.com\/soc\/#website"},"datePublished":"2026-10-19T13:49:29+00:00","dateModified":"2026-10-19T13:54:13+00:00","description":"Ejecuci\u00f3n remota de c\u00f3digo sin autenticaci\u00f3n en AnyDesk para Linux (CVE-2026-109390, \u201cAnyPwn\u201d)","breadcrumb":{"@id":"https:\/\/www.infordisa.com\/soc\/vulnerabilidad-critica-anydesk-linux\/#breadcrumb"},"inLanguage":"es","potentialAction":[{"@type":"ReadAction","target":["https:\/\/www.infordisa.com\/soc\/vulnerabilidad-critica-anydesk-linux\/"]}]},{"@type":"BreadcrumbList","@id":"https:\/\/www.infordisa.com\/soc\/vulnerabilidad-critica-anydesk-linux\/#breadcrumb","itemListElement":[{"@type":"ListItem","position":1,"name":"Portada","item":"https:\/\/www.infordisa.com\/soc\/"},{"@type":"ListItem","position":2,"name":"Vulnerabilidad cr\u00edtica de AnyDesk para Linux"}]},{"@type":"WebSite","@id":"https:\/\/www.infordisa.com\/soc\/#website","url":"https:\/\/www.infordisa.com\/soc\/","name":"INFORDISA \/ Security Operations Center","description":"Portal de Ciberseguridad","publisher":{"@id":"https:\/\/www.infordisa.com\/soc\/#organization"},"potentialAction":[{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https:\/\/www.infordisa.com\/soc\/?s={search_term_string}"},"query-input":{"@type":"PropertyValueSpecification","valueRequired":true,"valueName":"search_term_string"}}],"inLanguage":"es"},{"@type":"Organization","@id":"https:\/\/www.infordisa.com\/soc\/#organization","name":"INFORDISA \/ Security Operations Center","url":"https:\/\/www.infordisa.com\/soc\/","logo":{"@type":"ImageObject","inLanguage":"es","@id":"https:\/\/www.infordisa.com\/soc\/#\/schema\/logo\/image\/","url":"https:\/\/www.infordisa.com\/soc\/wp-content\/uploads\/2021\/11\/logo-securityoperationscenter.png","contentUrl":"https:\/\/www.infordisa.com\/soc\/wp-content\/uploads\/2021\/11\/logo-securityoperationscenter.png","width":400,"height":34,"caption":"INFORDISA \/ Security Operations Center"},"image":{"@id":"https:\/\/www.infordisa.com\/soc\/#\/schema\/logo\/image\/"},"sameAs":["https:\/\/www.facebook.com\/infordisa\/","https:\/\/x.com\/infordisa","https:\/\/www.linkedin.com\/company\/infordisa","https:\/\/www.youtube.com\/user\/InfordisaTV","https:\/\/www.instagram.com\/infordisa\/"]},{"@type":"Person","@id":"https:\/\/www.infordisa.com\/soc\/#\/schema\/person\/9e7088b9a88f62117d466d94479b2375","name":"Jordi Sala","image":{"@type":"ImageObject","inLanguage":"es","@id":"https:\/\/secure.gravatar.com\/avatar\/8c54ab66e828adf2561016ace1f387fbc25b3e9bb35a24b65c0d3cb64e309c28?s=96&r=g","url":"https:\/\/secure.gravatar.com\/avatar\/8c54ab66e828adf2561016ace1f387fbc25b3e9bb35a24b65c0d3cb64e309c28?s=96&r=g","contentUrl":"https:\/\/secure.gravatar.com\/avatar\/8c54ab66e828adf2561016ace1f387fbc25b3e9bb35a24b65c0d3cb64e309c28?s=96&r=g","caption":"Jordi Sala"},"description":"Marketing","sameAs":["https:\/\/www.infordisa.com\/soc\/"],"url":"https:\/\/www.infordisa.com\/soc\/author\/jsala\/"}]}},"_links":{"self":[{"href":"https:\/\/www.infordisa.com\/soc\/wp-json\/wp\/v2\/posts\/14147","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/www.infordisa.com\/soc\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/www.infordisa.com\/soc\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/www.infordisa.com\/soc\/wp-json\/wp\/v2\/users\/2"}],"replies":[{"embeddable":true,"href":"https:\/\/www.infordisa.com\/soc\/wp-json\/wp\/v2\/comments?post=14147"}],"version-history":[{"count":5,"href":"https:\/\/www.infordisa.com\/soc\/wp-json\/wp\/v2\/posts\/14147\/revisions"}],"predecessor-version":[{"id":14154,"href":"https:\/\/www.infordisa.com\/soc\/wp-json\/wp\/v2\/posts\/14147\/revisions\/14154"}],"wp:attachment":[{"href":"https:\/\/www.infordisa.com\/soc\/wp-json\/wp\/v2\/media?parent=14147"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/www.infordisa.com\/soc\/wp-json\/wp\/v2\/categories?post=14147"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/www.infordisa.com\/soc\/wp-json\/wp\/v2\/tags?post=14147"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}