« Volver al listado

CVE-2026-23572

Estado: AplazadaAlta (7.2)—

Improper access control in the TeamViewer Full and Host clients (Windows, macOS, Linux) prior version 15.74.5 allows an authenticated user to bypass additional access controls with “Allow after confirmation” configuration in a remote session. An exploit could result in unauthorized access prior to local confirmation. The user needs to be authenticated for the remote session via ID/password, Session Link, or Easy Access as a prerequisite to exploit this vulnerability.

CVSS

Probabilidad de explotación (EPSS)

EPSS (Exploit Prediction Scoring System, de FIRST) estima la probabilidad de que una vulnerabilidad sea explotada en 30 días. Complementa a CVSS (impacto) y a CISA KEV (explotación confirmada).

🎯 Técnicas ATT&CK

Cómo se explota esta vulnerabilidad y qué consigue el atacante, en el lenguaje de MITRE ATT&CK.

AV:N con PR:H (autenticado) + CWE-863 (control de acceso) → explotación de servicio remoto autenticado. La sesión remota ya establecida permite bypass de confirmación local para acceso no autorizado a funcionalidades adicionales.

Inferido por nuestro agente de análisis a partir de la descripción oficial, el vector CVSS y la CWE, y comprobado por un supervisor. Puede contener errores.

🛡️ Mitigaciones ATT&CK que cubren estas técnicas

User Account ManagementPrivileged Account ManagementMulti-factor AuthenticationDisable or Remove Feature or ProgramApplication Developer GuidanceActive Directory Configuration

Tecnologías afectadas (2)

⚠ Inferidas por IA a partir de la descripción — NVD aún no ha analizado esta CVE; no son CPE verificados.

Teamviewer — Teamviewer FullAITeamviewer — Teamviewer HostAI

CWE

Referencias

JSON original (NVD)

Mostrar
{
  "id": "CVE-2026-23572",
  "cveTags": [],
  "metrics": {
    "ssvcV203": [
      {
        "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "ssvcData": {
          "id": "CVE-2026-23572",
          "role": "CISA Coordinator",
          "options": [
            {
              "exploitation": "none"
            },
            {
              "automatable": "no"
            },
            {
              "technicalImpact": "total"
            }
          ],
          "version": "2.0.3",
          "timestamp": "2026-02-05T14:10:57.741868Z"
        }
      }
    ],
    "cvssMetricV31": [
      {
        "type": "Secondary",
        "source": "psirt@teamviewer.com",
        "cvssData": {
          "scope": "UNCHANGED",
          "version": "3.1",
          "baseScore": 7.2,
          "attackVector": "NETWORK",
          "baseSeverity": "HIGH",
          "vectorString": "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H",
          "integrityImpact": "HIGH",
          "userInteraction": "NONE",
          "attackComplexity": "LOW",
          "availabilityImpact": "HIGH",
          "privilegesRequired": "HIGH",
          "confidentialityImpact": "HIGH"
        },
        "impactScore": 5.9,
        "exploitabilityScore": 1.2
      }
    ]
  },
  "affected": [
    {
      "source": "psirt@teamviewer.com",
      "affectedData": [
        {
          "vendor": "TeamViewer",
          "modules": [
            "Full Client",
            "Host"
          ],
          "product": "Remote",
          "versions": [
            {
              "status": "affected",
              "version": "0",
              "lessThan": "15.74.5",
              "versionType": "custom"
            }
          ],
          "platforms": [
            "Windows",
            "MacOS",
            "Linux"
          ],
          "defaultStatus": "unaffected"
        },
        {
          "vendor": "TeamViewer",
          "modules": [
            "Full Client",
            "Host"
          ],
          "product": "Tensor",
          "versions": [
            {
              "status": "affected",
              "version": "0",
              "lessThan": "15.74.5",
              "versionType": "custom"
            }
          ],
          "platforms": [
            "Windows",
            "MacOS",
            "Linux"
          ],
          "defaultStatus": "unaffected"
        },
        {
          "vendor": "TeamViewer",
          "modules": [
            "Full Client",
            "Host"
          ],
          "product": "One",
          "versions": [
            {
              "status": "affected",
              "version": "0",
              "lessThan": "15.74.5",
              "versionType": "custom"
            }
          ],
          "platforms": [
            "Windows",
            "MacOS",
            "Linux"
          ],
          "defaultStatus": "unaffected"
        }
      ]
    }
  ],
  "published": "2026-02-05T12:16:01.607",
  "references": [
    {
      "url": "https://www.teamviewer.com/en/resources/trust-center/security-bulletins/tv-2026-1003/",
      "source": "psirt@teamviewer.com"
    }
  ],
  "vulnStatus": "Deferred",
  "weaknesses": [
    {
      "type": "Secondary",
      "source": "psirt@teamviewer.com",
      "description": [
        {
          "lang": "en",
          "value": "CWE-863"
        }
      ]
    }
  ],
  "descriptions": [
    {
      "lang": "en",
      "value": "Improper access control in the TeamViewer Full and Host clients (Windows, macOS, Linux) prior version 15.74.5 allows an authenticated user to bypass additional access controls with “Allow after confirmation” configuration in a remote session. An exploit could result in unauthorized access prior to local confirmation. The user needs to be authenticated for the remote session via ID/password, Session Link, or Easy Access as a prerequisite to exploit this vulnerability."
    },
    {
      "lang": "es",
      "value": "Control de acceso inadecuado en los clientes TeamViewer Full y Host (Windows, macOS, Linux) anterior a la versión 15.74.5 permite a un usuario autenticado eludir controles de acceso adicionales con la configuración 'Permitir después de la confirmación' en una sesión remota. Un exploit podría resultar en acceso no autorizado antes de la confirmación local. El usuario debe estar autenticado para la sesión remota a través de ID/contraseña, Enlace de Sesión o Acceso Fácil como requisito previo para explotar esta vulnerabilidad."
    }
  ],
  "lastModified": "2026-06-17T10:21:47.860",
  "sourceIdentifier": "psirt@teamviewer.com"
}