Improper Authentication Vulnerability in TeamViewer Remote Management for Windows
CVE-2026-92376

7.8HIGH

Key Information:

Vendor

Teamviewer

Status
Remote Management - Monitoring
Vendor
CVE Published:
27 October 2026

What is CVE-2026-92376?

An improper authentication flaw has been identified in the inter-process communication (IPC) mechanism of TeamViewer Remote Management for Windows. This vulnerability allows a local authenticated attacker with low privileges to impersonate the IPC broker. By doing so, the attacker can manipulate the Monitoring service to execute arbitrary code with NT AUTHORITY\SYSTEM privileges, leading to local privilege escalation. Users are advised to update to version 26.10.1 or later to mitigate this security risk.

Affected Version(s)

Remote Management - Monitoring Windows 0 < 26.10.1

References

https://www.teamviewer.com/en/resources/trust-center/secu...
vendor-advisory

CVSS V3.1

Score:
7.8
Severity:
HIGH
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Local
Attack Complexity:
Low
Privileges Required:
Low
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

Credit

0x_alibabas (Giuliano Sanfins)
.