CVE-2026-8381
Gravedad CVSS v3.1:
MEDIA
Tipo:
No Disponible / Otro tipo
Fecha de publicación:
22/05/2026
Última modificación:
22/05/2026
Descripción
*** Pendiente de traducción *** A broken access<br />
control vulnerability exists in the TeamViewer DEX Platform (On‑Premises) prior version 9.2. Certain backend API endpoints do not<br />
correctly enforce authorization checks, allowing an authenticated user with low<br />
privileges to perform actions and access resources intended only for higher‑privileged roles. An attacker with<br />
low‑privileged credentials may exploit<br />
this to gain unauthorized access to administrative or sensitive functionality.
Impacto
Puntuación base 3.x
5.40
Gravedad 3.x
MEDIA