PT-2026-6552 · Teamviewer · Teamviewer

M.M + 1 · Publicado 2026-02-05 · Atualizado 2026-02-07 · CVE-2026-23572

Positive Technologies (AI Summary)

CVSS v3.1

7.2

Alta

Vetor base

AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions TeamViewer versions prior to 15.74.5

Description An issue exists in TeamViewer Full and Host clients (Windows, macOS, Linux) where improper access control can be bypassed. An authenticated user can bypass additional access controls configured with the “Allow after confirmation” setting during a remote session. Exploitation requires authentication for the remote session via ID/password, Session Link, or Easy Access. Successful exploitation could lead to unauthorized access before local confirmation.

Recommendations Update TeamViewer to version 15.74.5 or later.

Correção

Incorrect Authorization

Enumeração de Fraquezas

CWE-863

Identificadores relacionados

CVE-2026-23572

Produtos afetados

Teamviewer

Referências · 7

• https://teamviewer.com/en/resources/trust-center/security-bulletins/tv-2026-1003 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2026-23572 · Nota de Segurança
• https://reddit.com/r/Action1/comments/1qybwem/teamviewer_15745 · Publicação no Reddit
• https://twitter.com/CVEnew/status/2019392391879250348 · Publicação no Twitter
• https://t.me/CVEtracker/43815 · Publicação no Telegram
• https://twitter.com/VulmonFeeds/status/2019393092361584867 · Publicação no Twitter
• https://t.me/cveNotify/150971 · Publicação no Telegram