CVE-2026-12703

Published: Jul 29, 2026Modified: Jul 30, 2026Deferred

8.0

Vector

CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:C/C:H/I:H/A:H

Exploitability: 1.3 / Impact: 6.0

Source: psirt@teamviewer.com (Secondary)

Description

TeamViewer Full Client and Host for macOS before version 15.80 contain a business logic error that can allow an authenticated attacker to bypass a configured 2FA for Connections approval flow via Unattended Access and establish a remote connection to an affected macOS host.

Related CWEs

CWE-288

Authentication Bypass Using an Alternate Path or Channel

A product requires authentication, but the product has an alternate path or channel that does not require authentication.

References (1)

https://www.teamviewer.com/en/resources/trust-center/security-bulletins/tv-2026-1007/

Source: psirt@teamviewer.com

Timeline

No history available yet.