PT-2026-42736 · Teamviewer · Teamviewer Dex Platform

Published 2026-05-22 · Updated 2026-05-22 · CVE-2026-8381

Positive Technologies (AI Summary)

CVSS v3.1

5.4

Medium

Base vector

AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N

Name of the Vulnerable Software and Affected Versions TeamViewer DEX Platform (On-Premises) versions prior to 9.2

Description A broken access control issue exists where certain backend API endpoints fail to correctly enforce authorization checks. This allows an authenticated user with low privileges to perform actions and access resources intended for higher-privileged roles, potentially granting unauthorized access to administrative or sensitive functionality.

Recommendations Update to version 9.2 or later.

Fix

Missing Authorization

Weakness Enumeration

CWE-862

Related Identifiers

CVE-2026-8381

Affected Products

Teamviewer Dex Platform

References · 3

• https://nvd.nist.gov/vuln/detail/CVE-2026-8381 · Security Note
• https://teamviewer.com/en/resources/trust-center/security-bulletins/tv-2026-1005 · Note
• https://twitter.com/CVEnew/status/2057783162080464938 · Twitter Post