High severity · published Feb 5, 2026
CVE-2026-23572
Improper Access Control in TeamViewer clients
7.2
CVSS
0.3%
EPSS
No
On KEV
Description
Improper access control in the TeamViewer Full and Host clients (Windows, macOS, Linux) prior version 15.74.5 allows an authenticated user to bypass additional access controls with “Allow after confirmation” configuration in a remote session. An exploit could result in unauthorized access prior to local confirmation. The user needs to be authenticated for the remote session via ID/password, Session Link, or Easy Access as a prerequisite to exploit this vulnerability.
CVSS vector
CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H
Attack vector
Network
Complexity
Low
Privileges
High
User interaction
None
Confidentiality
High
Integrity
High
Availability
High
Scope
Unchanged
Exploitation
Is it being used?
Exploit prediction (EPSS)0.3% · higher than 24% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
ON
One · TeamViewer
before 15.74.5 · source: vendor
RE
Remote · TeamViewer
before 15.74.5 · source: vendor
TE
Tensor · TeamViewer
before 15.74.5 · source: vendor
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2026-23572
CVE.org
https://www.cve.org/CVERecord?id=CVE-2026-23572
www.teamviewer.com
https://www.teamviewer.com/en/resources/trust-center/security-bulletins/tv-2026-1003/
More from One
8.0
CVE-2026-12703
Bypass of 2FA for Connections via Unattended Access in TeamViewer for macOS