CVE-2026-23572highCWE-863

CVE-2026-23572: falha de alta gravidade em TeamViewer Remote

Improper Access Control in TeamViewer clients

Publicada em

Seguir esta CVE+ Monitorar Remote+ Monitorar One

Aviso por e-mail quando ela entrar no KEV, ganhar PoC pública ou subir de nota.

21Vexday Risk Score

Sem sinal de exploração. Nenhum artefato público de exploração conhecido até agora.

ssvc Trackcvss 7.2epss 0.3%
Improper access control in the TeamViewer Full and Host clients (Windows, macOS, Linux) prior version 15.74.5 allows an authenticated user to bypass additional access controls with “Allow after confirmation” configuration in a remote session. An exploit could result in unauthorized access prior to local confirmation. The user needs to be authenticated for the remote session via ID/password, Session Link, or Easy Access as a prerequisite to exploit this vulnerability.
CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H
Produtos afetados
TeamViewer · OneTeamViewer · RemoteTeamViewer · Tensor
CVEs relacionadas — TeamViewer Remote

No mesmo produto, das mais perigosas para as menos.

CVE-2026-12703HIGHBypass of 2FA for Connections via Unattended Access in TeamViewer for macOSEPSS 0.4%CVE-2023-0837MEDIUMCVE-2023-0837EPSS 0.2%