CVE-2026-92370 (GCVE-0-2026-92370)
Vulnerability from cvelistv5
Published
2026-09-29 15:42
Modified
2026-09-30 15:28
Severity ?
VLAI Severity ?
EPSS score ?
CWE
- CWE-284 - Improper Access Control
Summary
An improper access control vulnerability in TeamViewer Full Client, Host, and related affected modules on Windows, Linux, and macOS allows an authenticated remote attacker to bypass user-configured permission settings during session establishment. By modifying access control parameters for restricted features, an attacker can perform actions that were explicitly denied by the victim's configuration. This may result in unauthorized actions and potentially lead to remote code execution on the target system.
References
| URL | Tags | |
|---|---|---|
Impacted products
| Vendor | Product | Version | |||||||
|---|---|---|---|---|---|---|---|---|---|
| TeamViewer | Full Client |
Version: 15.0 < 15.82 Version: 15.64.0 (Legacy Windows 7 & 8) < 15.64.8 (Legacy Windows 7 & 8) Version: 14.7.0 (Windows) < 14.7.48855 (Windows) Version: 13.2.0 (Windows) < 13.2.36230 (Windows) Version: 14.7.0 (Linux) < 14.7.48855 (Linux) Version: 13.2.0 (Linux) < 13.2.153995 (Linux) Version: 14.7.0 (MacOS) < 14.7.48855 (MacOS) Version: 13.2.0 (MacOS) < 13.2.153994 (MacOS) |
|||||||
|
|||||||||
{
"containers": {
"adp": [
{
"metrics": [
{
"other": {
"content": {
"id": "CVE-2026-92370",
"options": [
{
"Exploitation": "none"
},
{
"Automatable": "no"
},
{
"Technical Impact": "total"
}
],
"role": "CISA Coordinator",
"timestamp": "2026-09-30T15:12:37.475626Z",
"version": "2.0.3"
},
"type": "ssvc"
}
}
],
"providerMetadata": {
"dateUpdated": "2026-09-30T15:28:18.681Z",
"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"shortName": "CISA-ADP"
},
"title": "CISA ADP Vulnrichment"
}
],
"cna": {
"affected": [
{
"defaultStatus": "unaffected",
"platforms": [
"Windows",
"Linux",
"MacOS"
],
"product": "Full Client",
"vendor": "TeamViewer",
"versions": [
{
"lessThan": "15.82",
"status": "affected",
"version": "15.0",
"versionType": "custom"
},
{
"lessThan": "15.64.8 (Legacy Windows 7 \u0026 8)",
"status": "affected",
"version": "15.64.0 (Legacy Windows 7 \u0026 8)",
"versionType": "custom"
},
{
"lessThan": "14.7.48855 (Windows)",
"status": "affected",
"version": "14.7.0 (Windows)",
"versionType": "custom"
},
{
"lessThan": "13.2.36230 (Windows)",
"status": "affected",
"version": "13.2.0 (Windows)",
"versionType": "custom"
},
{
"lessThan": "14.7.48855 (Linux)",
"status": "affected",
"version": "14.7.0 (Linux)",
"versionType": "custom"
},
{
"lessThan": "13.2.153995 (Linux)",
"status": "affected",
"version": "13.2.0 (Linux)",
"versionType": "custom"
},
{
"lessThan": "14.7.48855 (MacOS)",
"status": "affected",
"version": "14.7.0 (MacOS)",
"versionType": "custom"
},
{
"lessThan": "13.2.153994 (MacOS)",
"status": "affected",
"version": "13.2.0 (MacOS)",
"versionType": "custom"
}
]
},
{
"defaultStatus": "unaffected",
"platforms": [
"Windows",
"Linux",
"MacOS"
],
"product": "Host",
"vendor": "TeamViewer",
"versions": [
{
"lessThan": "15.82",
"status": "affected",
"version": "15.0",
"versionType": "custom"
},
{
"lessThan": "15.64.8 (Legacy Windows 7 \u0026 8)",
"status": "affected",
"version": "15.64.0 (Legacy Windows 7 \u0026 8)",
"versionType": "custom"
},
{
"lessThan": "14.7.48855 (Windows)",
"status": "affected",
"version": "14.7.0 (Windows)",
"versionType": "custom"
},
{
"lessThan": "13.2.36230 (Windows)",
"status": "affected",
"version": "13.2.0 (Windows)",
"versionType": "custom"
},
{
"lessThan": "14.7.48855 (Linux)",
"status": "affected",
"version": "14.7.0 (Linux)",
"versionType": "custom"
},
{
"lessThan": "13.2.153995 (Linux)",
"status": "affected",
"version": "13.2.0 (Linux)",
"versionType": "custom"
},
{
"lessThan": "14.7.48855 (MacOS)",
"status": "affected",
"version": "14.7.0 (MacOS)",
"versionType": "custom"
},
{
"lessThan": "13.2.153994 (MacOS)",
"status": "affected",
"version": "13.2.0 (MacOS)",
"versionType": "custom"
}
]
}
],
"credits": [
{
"lang": "en",
"type": "finder",
"value": "We thank HeaZzy (Mathys KHALFA) \u0026 skav\u202f(Antoine RIEUL) for the discovery and responsible disclosure."
}
],
"descriptions": [
{
"lang": "en",
"supportingMedia": [
{
"base64": false,
"type": "text/html",
"value": "An improper access control vulnerability in TeamViewer Full Client, Host, and related affected modules on Windows, Linux, and macOS allows an authenticated remote attacker to bypass user-configured permission settings during session establishment. By modifying access control parameters for restricted features, an attacker can perform actions that were explicitly denied by the victim\u0027s configuration. This may result in unauthorized actions and potentially lead to remote code execution on the target system.\u0026nbsp;"
}
],
"value": "An improper access control vulnerability in TeamViewer Full Client, Host, and related affected modules on Windows, Linux, and macOS allows an authenticated remote attacker to bypass user-configured permission settings during session establishment. By modifying access control parameters for restricted features, an attacker can perform actions that were explicitly denied by the victim\u0027s configuration. This may result in unauthorized actions and potentially lead to remote code execution on the target system."
}
],
"impacts": [
{
"capecId": "CAPEC-113",
"descriptions": [
{
"lang": "en",
"value": "CAPEC-113 Interface Manipulation"
}
]
}
],
"metrics": [
{
"cvssV3_1": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 8.8,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "REQUIRED",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"format": "CVSS",
"scenarios": [
{
"lang": "en",
"value": "GENERAL"
}
]
}
],
"problemTypes": [
{
"descriptions": [
{
"cweId": "CWE-284",
"description": "CWE-284 Improper Access Control",
"lang": "en",
"type": "CWE"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2026-09-29T15:42:27.283Z",
"orgId": "13430f76-86eb-43b2-a71c-82c956ef31b6",
"shortName": "TV"
},
"references": [
{
"tags": [
"vendor-advisory"
],
"url": "https://www.teamviewer.com/en/resources/trust-center/security-bulletins/tv-2026-1010/"
}
],
"solutions": [
{
"lang": "en",
"supportingMedia": [
{
"base64": false,
"type": "text/html",
"value": "Update to the latest version."
}
],
"value": "Update to the latest version."
}
],
"source": {
"discovery": "UNKNOWN"
},
"title": "Remote Session Access Control Bypass Leading to Remote Code Execution",
"x_generator": {
"engine": "Vulnogram 1.0.5"
}
}
},
"cveMetadata": {
"assignerOrgId": "13430f76-86eb-43b2-a71c-82c956ef31b6",
"assignerShortName": "TV",
"cveId": "CVE-2026-92370",
"datePublished": "2026-09-29T15:42:27.283Z",
"dateReserved": "2026-09-16T07:16:01.956Z",
"dateUpdated": "2026-09-30T15:28:18.681Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.2",
"vulnerability-lookup:meta": {
"vulnrichment": {
"containers": "{\"cna\": {\"providerMetadata\": {\"orgId\": \"13430f76-86eb-43b2-a71c-82c956ef31b6\", \"shortName\": \"TV\", \"dateUpdated\": \"2026-09-29T15:42:27.283Z\"}, \"title\": \"Remote Session Access Control Bypass Leading to Remote Code Execution\", \"problemTypes\": [{\"descriptions\": [{\"lang\": \"en\", \"cweId\": \"CWE-284\", \"description\": \"CWE-284 Improper Access Control\", \"type\": \"CWE\"}]}], \"impacts\": [{\"capecId\": \"CAPEC-113\", \"descriptions\": [{\"lang\": \"en\", \"value\": \"CAPEC-113 Interface Manipulation\"}]}], \"affected\": [{\"vendor\": \"TeamViewer\", \"product\": \"Full Client\", \"platforms\": [\"Windows\", \"Linux\", \"MacOS\"], \"versions\": [{\"status\": \"affected\", \"version\": \"15.0\", \"lessThan\": \"15.82\", \"versionType\": \"custom\"}, {\"status\": \"affected\", \"version\": \"15.64.0 (Legacy Windows 7 \u0026 8)\", \"lessThan\": \"15.64.8 (Legacy Windows 7 \u0026 8)\", \"versionType\": \"custom\"}, {\"status\": \"affected\", \"version\": \"14.7.0 (Windows)\", \"lessThan\": \"14.7.48855 (Windows)\", \"versionType\": \"custom\"}, {\"status\": \"affected\", \"version\": \"13.2.0 (Windows)\", \"lessThan\": \"13.2.36230 (Windows)\", \"versionType\": \"custom\"}, {\"status\": \"affected\", \"version\": \"14.7.0 (Linux)\", \"lessThan\": \"14.7.48855 (Linux)\", \"versionType\": \"custom\"}, {\"status\": \"affected\", \"version\": \"13.2.0 (Linux)\", \"lessThan\": \"13.2.153995 (Linux)\", \"versionType\": \"custom\"}, {\"status\": \"affected\", \"version\": \"14.7.0 (MacOS)\", \"lessThan\": \"14.7.48855 (MacOS)\", \"versionType\": \"custom\"}, {\"status\": \"affected\", \"version\": \"13.2.0 (MacOS)\", \"lessThan\": \"13.2.153994 (MacOS)\", \"versionType\": \"custom\"}], \"defaultStatus\": \"unaffected\"}, {\"vendor\": \"TeamViewer\", \"product\": \"Host\", \"platforms\": [\"Windows\", \"Linux\", \"MacOS\"], \"versions\": [{\"status\": \"affected\", \"version\": \"15.0\", \"lessThan\": \"15.82\", \"versionType\": \"custom\"}, {\"status\": \"affected\", \"version\": \"15.64.0 (Legacy Windows 7 \u0026 8)\", \"lessThan\": \"15.64.8 (Legacy Windows 7 \u0026 8)\", \"versionType\": \"custom\"}, {\"status\": \"affected\", \"version\": \"14.7.0 (Windows)\", \"lessThan\": \"14.7.48855 (Windows)\", \"versionType\": \"custom\"}, {\"status\": \"affected\", \"version\": \"13.2.0 (Windows)\", \"lessThan\": \"13.2.36230 (Windows)\", \"versionType\": \"custom\"}, {\"status\": \"affected\", \"version\": \"14.7.0 (Linux)\", \"lessThan\": \"14.7.48855 (Linux)\", \"versionType\": \"custom\"}, {\"status\": \"affected\", \"version\": \"13.2.0 (Linux)\", \"lessThan\": \"13.2.153995 (Linux)\", \"versionType\": \"custom\"}, {\"status\": \"affected\", \"version\": \"14.7.0 (MacOS)\", \"lessThan\": \"14.7.48855 (MacOS)\", \"versionType\": \"custom\"}, {\"status\": \"affected\", \"version\": \"13.2.0 (MacOS)\", \"lessThan\": \"13.2.153994 (MacOS)\", \"versionType\": \"custom\"}], \"defaultStatus\": \"unaffected\"}], \"descriptions\": [{\"lang\": \"en\", \"value\": \"An improper access control vulnerability in TeamViewer Full Client, Host, and related affected modules on Windows, Linux, and macOS allows an authenticated remote attacker to bypass user-configured permission settings during session establishment. By modifying access control parameters for restricted features, an attacker can perform actions that were explicitly denied by the victim\u0027s configuration. This may result in unauthorized actions and potentially lead to remote code execution on the target system.\", \"supportingMedia\": [{\"type\": \"text/html\", \"base64\": false, \"value\": \"An improper access control vulnerability in TeamViewer Full Client, Host, and related affected modules on Windows, Linux, and macOS allows an authenticated remote attacker to bypass user-configured permission settings during session establishment. By modifying access control parameters for restricted features, an attacker can perform actions that were explicitly denied by the victim\u0027s configuration. This may result in unauthorized actions and potentially lead to remote code execution on the target system.\u0026nbsp;\"}]}], \"references\": [{\"url\": \"https://www.teamviewer.com/en/resources/trust-center/security-bulletins/tv-2026-1010/\", \"tags\": [\"vendor-advisory\"]}], \"metrics\": [{\"format\": \"CVSS\", \"scenarios\": [{\"lang\": \"en\", \"value\": \"GENERAL\"}], \"cvssV3_1\": {\"version\": \"3.1\", \"attackVector\": \"NETWORK\", \"attackComplexity\": \"LOW\", \"privilegesRequired\": \"NONE\", \"userInteraction\": \"REQUIRED\", \"scope\": \"UNCHANGED\", \"confidentialityImpact\": \"HIGH\", \"integrityImpact\": \"HIGH\", \"availabilityImpact\": \"HIGH\", \"baseSeverity\": \"HIGH\", \"baseScore\": 8.8, \"vectorString\": \"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H\"}}], \"solutions\": [{\"lang\": \"en\", \"value\": \"Update to the latest version.\", \"supportingMedia\": [{\"type\": \"text/html\", \"base64\": false, \"value\": \"Update to the latest version.\"}]}], \"credits\": [{\"lang\": \"en\", \"value\": \"We thank HeaZzy (Mathys KHALFA) \u0026 skav\\u202f(Antoine RIEUL) for the discovery and responsible disclosure.\", \"type\": \"finder\"}], \"source\": {\"discovery\": \"UNKNOWN\"}, \"x_generator\": {\"engine\": \"Vulnogram 1.0.5\"}}, \"adp\": [{\"title\": \"CISA ADP Vulnrichment\", \"metrics\": [{\"other\": {\"type\": \"ssvc\", \"content\": {\"id\": \"CVE-2026-92370\", \"role\": \"CISA Coordinator\", \"options\": [{\"Exploitation\": \"none\"}, {\"Automatable\": \"no\"}, {\"Technical Impact\": \"total\"}], \"version\": \"2.0.3\", \"timestamp\": \"2026-09-30T15:12:37.475626Z\"}}}], \"providerMetadata\": {\"orgId\": \"134c704f-9b21-4f2e-91b3-4a467353bcc0\", \"shortName\": \"CISA-ADP\", \"dateUpdated\": \"2026-09-30T15:26:36.757Z\"}}]}",
"cveMetadata": "{\"cveId\": \"CVE-2026-92370\", \"assignerOrgId\": \"13430f76-86eb-43b2-a71c-82c956ef31b6\", \"state\": \"PUBLISHED\", \"assignerShortName\": \"TV\", \"dateReserved\": \"2026-09-16T07:16:01.956Z\", \"datePublished\": \"2026-09-29T15:42:27.283Z\", \"dateUpdated\": \"2026-09-30T15:28:18.681Z\"}",
"dataType": "CVE_RECORD",
"dataVersion": "5.2"
}
}
}
Loading…
Loading…
Sightings
| Author | Source | Type | Date |
|---|
Nomenclature
- Seen: The vulnerability was mentioned, discussed, or seen somewhere by the user.
- Confirmed: The vulnerability is confirmed from an analyst perspective.
- Published Proof of Concept: A public proof of concept is available for this vulnerability.
- Exploited: This vulnerability was exploited and seen by the user reporting the sighting.
- Patched: This vulnerability was successfully patched by the user reporting the sighting.
- Not exploited: This vulnerability was not exploited or seen by the user reporting the sighting.
- Not confirmed: The user expresses doubt about the veracity of the vulnerability.
- Not patched: This vulnerability was not successfully patched by the user reporting the sighting.
Loading…
Loading…