Improper authentication in the inter-process communication (IPC) mechanism of TeamViewer Remote Management Monitoring for Windows prior to version…
Improper authentication in the inter-process communication (IPC) mechanism of TeamViewer Remote Management Monitoring for Windows prior to version 26.10.1 allows a local authenticated attacker with low privileges to impersonate the IPC broker and cause the Monitoring service to execute arbitrary code with NT AUTHORITY\SYSTEM privileges, resulting in local privilege escalation.
Read at NIST National Vulnerability Database (CVE API 2.0)
- Vendor
- TeamViewer
- Product
- Remote Management - Monitoring
- CVSS v3.1
- 7.8 AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
- EPSS
- 0.001 (p3)
- Weakness
- CWE-287
- Exposure class
- Remote access
- NVD status
- Received
Why it ranks 24 (Routine)
- CVSS v3.1 7.8 high
- Exposed product class: remote access
- Recency: items published within 24 hours gain 15, within 72 hours 6, within 7 days 2.
Links
- NIST National Vulnerability Database (CVE API 2.0) (nvd.nist.gov)
- CVE-2026-92376 on this site · NVD · CVE.org · Vulnpedia