7.2

CVE-2026-23572

Medienbericht

Improper Access Control in TeamViewer clients

Improper access control in the TeamViewer Full and Host clients (Windows, macOS, Linux) prior version 15.74.5 allows an authenticated user to bypass additional access controls with “Allow after confirmation” configuration in a remote session. An exploit could result in unauthorized access prior to local confirmation. The user needs to be authenticated for the remote session via ID/password, Session Link, or Easy Access as a prerequisite to exploit this vulnerability.
Daten sind bereitgestellt durch das CVE Programm von einer CVE Numbering Authority (CNA) (Unstrukturiert).
HerstellerTeamViewer
≫
Produkt Remote
Default Statusunaffected
Version 0
Version < 15.74.5
Status affected
HerstellerTeamViewer
≫
Produkt Tensor
Default Statusunaffected
Version 0
Version < 15.74.5
Status affected
HerstellerTeamViewer
≫
Produkt One
Default Statusunaffected
Version 0
Version < 15.74.5
Status affected
VulnDex Vulnerability Enrichment
Diese Information steht angemeldeten Benutzern zur Verfügung. Login Login
Zu dieser CVE wurde keine Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 0.27% 0.188
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
psirt@teamviewer.com 7.2 1.2 5.9
CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H
CWE-863 Incorrect Authorization

The product performs an authorization check when an actor attempts to access a resource or perform an action, but it does not correctly perform the check.

Für Zugriff zu Vulnerability Intelligence ist ein VulnDex Zugang erforderlich.
VulnDex Intel
Media Report
06.02.2026 08:44
https://www.teamviewer.com/en/resources/trust-center/security-bulletins/tv-2026-1003/