CVE-2026-92377 Local Privilege Escalation via DLL Sideloading in TeamViewer Patch Management for Windows

Improper access control in the Patch Management update mechanism of TeamViewer Full Client and Host for Windows prior to version 15.82 allows a local authenticated attacker with low privileges to supply a signed executable through a forged IPC response and cause it to load a malicious DLL from a...

EUVD-2026-111077

Improper access control in the Patch Management update mechanism of TeamViewer Full Client and Host for Windows prior to version 15.82 allows a local authenticated attacker with low privileges to supply a signed executable through a forged IPC response and cause it to load a malicious DLL from a...

CVE-2026-92377

TeamViewer Full Client and Host for Windows prior to version 15.82 are vulnerable to a Local Privilege Escalation due to improper access control in the Patch Management update mechanism. A local authenticated attacker with low privileges can supply a signed executable via a forged IPC response, f...

CVE-2026-92376 Local Privilege Escalation via IPC Broker Impersonation in TeamViewer Remote Management Monitoring for Windows

Improper authentication in the inter-process communication IPC mechanism of TeamViewer Remote Management Monitoring for Windows prior to version 26.10.1 allows a local authenticated attacker with low privileges to impersonate the IPC broker and cause the Monitoring service to execute arbitrary co...

EUVD-2026-111076

Improper authentication in the inter-process communication IPC mechanism of TeamViewer Remote Management Monitoring for Windows prior to version 26.10.1 allows a local authenticated attacker with low privileges to impersonate the IPC broker and cause the Monitoring service to execute arbitrary co...

CVE-2026-92376

TeamViewer Remote Management Monitoring for Windows versions prior to 26.10.1 are vulnerable to a local privilege escalation flaw due to improper authentication in the inter-process communication (IPC) mechanism. A local authenticated attacker with low privileges can impersonate the IPC broker , ...

CVE-2026-92376 Local Privilege Escalation via IPC Broker Impersonation in TeamViewer Remote Management Monitoring for Windows

Improper authentication in the inter-process communication IPC mechanism of TeamViewer Remote Management Monitoring for Windows prior to version 26.10.1 allows a local authenticated attacker with low privileges to impersonate the IPC broker and cause the Monitoring service to execute arbitrary co...

SmarterMail — Antivirus Command-Line Configuration → RCE as NT AUTHORITY\SYSTEM — Detect

Fingerprint / reachability check for SmarterMail — Antivirus Command-Line Configuration → RCE as NT AUTHORITY\SYSTEM !/usr/bin/env python3 -- coding: utf-8 -- r"""Detection for SmarterMail — Antivirus Command-Line Configuration → RCE as NT AUTHORITY\SYSTEM""" from kittysploit import from...

Devolutions Server (DVLS) — Bypassable PAM Entitlement Gate Exposes the `test-sc — Detect

Fingerprint / reachability check for Devolutions Server DVLS — Bypassable PAM Entitlement Gate Exposes the test-script PowerShell Sink: Administrator to NT AUTHORITY\SYSTEM !/usr/bin/env python3 -- coding: utf-8 -- """Detection for Devolutions Server DVLS — Bypassable PAM Entitlement Gate Exposes...

TeamViewer Full Client permission and access control issue vulnerability

TeamViewer Full Client and Host for Windows versions prior to 15.82 contain a permission and access control vulnerability. This flaw stems from improper access control within the Patch Management update mechanism. Local authenticated attackers with low privileges can exploit this by sending forge...

CVE-2026-92376: Improper Authentication

Improper authentication in the inter-process communication IPC mechanism of TeamViewer Remote Management Monitoring for Windows prior to version 26.10.1 allows a local authenticated attacker with low privileges to impersonate the IPC broker and cause the Monitoring service to execute arbitrary co...

PT-2026-126624

Improper authentication in the inter-process communication IPC mechanism of TeamViewer Remote Management Monitoring for Windows prior to version 26.10.1 allows a local authenticated attacker with low privileges to impersonate the IPC broker and cause the Monitoring service to execute arbitrary co...

PT-2026-126625

Improper access control in the Patch Management update mechanism of TeamViewer Full Client and Host for Windows prior to version 15.82 allows a local authenticated attacker with low privileges to supply a signed executable through a forged IPC response and cause it to load a malicious DLL from a...

CVE-2026-92377: Incorrect Permission Assignment for Critical Resource

Improper access control in the Patch Management update mechanism of TeamViewer Full Client and Host for Windows prior to version 15.82 allows a local authenticated attacker with low privileges to supply a signed executable through a forged IPC response and cause it to load a malicious DLL from a...

TeamViewer Remote Management Monitoring authorization issue vulnerability

Versions of TeamViewer Remote Management Monitoring prior to 26.10.1 contain an authorization issue vulnerability. This vulnerability stems from improper authentication in the IPC mechanism, potentially allowing locally authenticated attackers with low privileges to impersonate the IPC broker. As...

CVE-2026-114220

NT OneAPP developed by NewType Infortech has an Improper Certificate Validation vulnerability. Unauthenticated network-adjacent attackers can perform a man-in-the-middle attack by failing to validate the server certificate and the hostname, thereby intercepting or modifying communications between...

CVE-2026-114221

NT OneAPP developed by NewType Infortech has a Credential Disclosure vulnerability. Unauthenticated remote attackers can trigger an HTTP Basic Authentication challenge from an unvalidated source in the WebView under specific conditions, thereby obtaining the NUP Portal passcode of a logged-in use...

CVE-2026-114222

NT OneAPP developed by NewType Infortech has an Authentication Bypass vulnerability. Unauthenticated local attackers can bypass the App PIN lock mechanism via a Deep Link, thereby accessing protected resources of a logged-in user...

CVE-2026-114223

NT OneAPP developed by NewType Infortech has an Exposure of Sensitive Information vulnerability. Unauthenticated local attackers can extract plaintext usernames and passwords from backup data after obtaining ADB backup access authorization and user confirmation of the backup, resulting in sensiti...

CVE-2026-114219

NT OneAPP developed by NewType Infortech has a Hard-coded Credentials vulnerability. Unauthenticated remote attackers can obtain the hard-coded cryptographic key and decrypt login request contents, thereby obtaining users' plaintext account credentials and device information...