CVE-2026-92375

Published: Oct 27, 2026Modified: Oct 27, 2026

7.8

Vector

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Exploitability: 1.8 / Impact: 5.9

Source: psirt@teamviewer.com (Secondary)

Description

An improper access control vulnerability in the IPC communication between TeamViewer Full Client or Host prior to version 15.83 and the Remote Management Monitoring component prior to version 26.10.1 allows a local authenticated attacker with low privileges to execute scripts as SYSTEM/root.

Related CWEs

CWE-284

Improper Access Control

The product does not restrict or incorrectly restricts access to a resource from an unauthorized actor.

References (1)

https://www.teamviewer.com/en/resources/trust-center/security-bulletins/tv-2026-1012/

Source: psirt@teamviewer.com

Timeline

No history available yet.