CVE-2026-8381
Severity CVSS v4.0:
Pending analysis
Type:
Unavailable / Other
Publication date:
22/05/2026
Last modified:
22/05/2026
Description
A broken access<br />
control vulnerability exists in the TeamViewer DEX Platform (On‑Premises) prior version 9.2. Certain backend API endpoints do not<br />
correctly enforce authorization checks, allowing an authenticated user with low<br />
privileges to perform actions and access resources intended only for higher‑privileged roles. An attacker with<br />
low‑privileged credentials may exploit<br />
this to gain unauthorized access to administrative or sensitive functionality.
Impact
Base Score 3.x
5.40
Severity 3.x
MEDIUM