Lucene search
K

580 matches found

NVD
NVD
added 2026/05/22 9:16 a.m.10 views

CVE-2026-8381

A broken access control vulnerability exists in the TeamViewer DEX Platform On‑Premises prior version 9.2. Certain backend API endpoints do not correctly enforce authorization checks, allowing an authenticated user with low privileges to perform actions and access resources intended only for...

5.4CVSS0.00033EPSS
Exploits0References1
CVE
CVE
added 2026/05/22 8:29 a.m.12 views

CVE-2026-8381

CVE-2026-8381 : In the TeamViewer DEX Platform (On-Premises) before version 9.2, certain backend API endpoints fail to enforce authorization checks, allowing an authenticated user with low privileges to access actions and resources intended for higher-privileged roles. This is a broken access con...

5.4CVSS5.8AI score0.00033EPSS
Exploits0References1
ATTACKERKB
ATTACKERKB
added 2026/05/22 8:29 a.m.7 views

CVE-2026-8381

A broken access control vulnerability exists in the TeamViewer DEX Platform On‑Premises prior version 9.2. Certain backend API endpoints do not correctly enforce authorization checks, allowing an authenticated user with low privileges to perform actions and access resources intended only for...

5.4CVSS5.8AI score0.00033EPSS
Exploits0References2
EUVD
EUVD
added 2026/05/22 8:29 a.m.6 views

EUVD-2026-31420

A broken access control vulnerability exists in the TeamViewer DEX Platform On‑Premises prior version 9.2. Certain backend API endpoints do not correctly enforce authorization checks, allowing an authenticated user with low privileges to perform actions and access resources intended only for...

5.4CVSS5.8AI score0.00033EPSS
Exploits0References1
Cvelist
Cvelist
added 2026/05/22 8:29 a.m.24 views

CVE-2026-8381 Broken Access Control in TeamViewer DEX Platform (On Premises)

A broken access control vulnerability exists in the TeamViewer DEX Platform On‑Premises prior version 9.2. Certain backend API endpoints do not correctly enforce authorization checks, allowing an authenticated user with low privileges to perform actions and access resources intended only for...

5.4CVSS0.00033EPSS
Exploits0References1
Vulnrichment
Vulnrichment
added 2026/05/22 8:29 a.m.3 views

CVE-2026-8381 Broken Access Control in TeamViewer DEX Platform (On Premises)

A broken access control vulnerability exists in the TeamViewer DEX Platform On‑Premises prior version 9.2. Certain backend API endpoints do not correctly enforce authorization checks, allowing an authenticated user with low privileges to perform actions and access resources intended only for...

5.4CVSS5.8AI score0.00033EPSS
Exploits0References1
CNNVD
CNNVD
added 2026/05/22 12:0 a.m.3 views

TeamViewer DEX Platform On-Premises 安全漏洞

The TeamViewer DEX Platform On-Premises is a locally deployed digital employee experience management platform by the German company TeamViewer. Prior to version 9.2 of the TeamViewer DEX Platform On-Premises, there were security vulnerabilities. These vulnerabilities stemmed from incorrect...

5.4CVSS5.8AI score0.00033EPSS
Exploits0References1
Positive Technologies
Positive Technologies
added 2026/05/22 12:0 a.m.5 views

PT-2026-42736

A broken access control vulnerability exists in the TeamViewer DEX Platform On‑Premises prior version 9.2. Certain backend API endpoints do not correctly enforce authorization checks, allowing an authenticated user with low privileges to perform actions and access resources intended only for...

5.4CVSS5.8AI score0.00033EPSS
Exploits0References2
EUVD
EUVD
added 2026/05/13 6:30 p.m.4 views

EUVD-2026-30056

A command injection vulnerability was discovered in TeamViewer DEX Platform On-Premises former 1E DEX Platform On-Premises prior to version 9.2. Improper input validation allows authenticated users with at least questioner privileges to inject commands in specific instructions. Exploitation could...

6.3CVSS5.9AI score0.00092EPSS
Exploits0References2
NVD
NVD
added 2026/05/13 5:16 p.m.4 views

CVE-2026-2695

A command injection vulnerability was discovered in TeamViewer DEX Platform On-Premises former 1E DEX Platform On-Premises prior to version 9.2. Improper input validation allows authenticated users with at least questioner privileges to inject commands in specific instructions. Exploitation could...

6.3CVSS0.00092EPSS
Exploits0References1
ATTACKERKB
ATTACKERKB
added 2026/05/13 4:9 p.m.1 views

CVE-2026-2695

A command injection vulnerability was discovered in TeamViewer DEX Platform On-Premises former 1E DEX Platform On-Premises prior to version 9.2. Improper input validation allows authenticated users with at least questioner privileges to inject commands in specific instructions. Exploitation could...

6.3CVSS5.9AI score0.00092EPSS
Exploits0References2
Cvelist
Cvelist
added 2026/05/13 4:9 p.m.20 views

CVE-2026-2695 Lack of Server-side validation in Instruction Input in TeamViewer DEX Platform (On-Premises)

A command injection vulnerability was discovered in TeamViewer DEX Platform On-Premises former 1E DEX Platform On-Premises prior to version 9.2. Improper input validation allows authenticated users with at least questioner privileges to inject commands in specific instructions. Exploitation could...

6.3CVSS0.00092EPSS
Exploits0References1
Vulnrichment
Vulnrichment
added 2026/05/13 4:9 p.m.2 views

CVE-2026-2695 Lack of Server-side validation in Instruction Input in TeamViewer DEX Platform (On-Premises)

A command injection vulnerability was discovered in TeamViewer DEX Platform On-Premises former 1E DEX Platform On-Premises prior to version 9.2. Improper input validation allows authenticated users with at least questioner privileges to inject commands in specific instructions. Exploitation could...

6.3CVSS5.9AI score0.00092EPSS
Exploits0References1
CNNVD
CNNVD
added 2026/05/13 12:0 a.m.4 views

TeamViewer DEX Platform On-Premises 输入验证错误漏洞

The TeamViewer DEX Platform On-Premises is a locally deployed digital employee experience management platform by the German company TeamViewer. Prior to version 9.2 of the TeamViewer DEX Platform On-Premises, there was a vulnerability related to input validation errors. This vulnerability stemmed...

6.3CVSS5.9AI score0.00092EPSS
Exploits0References1
Positive Technologies
Positive Technologies
added 2026/05/13 12:0 a.m.4 views

PT-2026-40709

A command injection vulnerability was discovered in TeamViewer DEX Platform On-Premises former 1E DEX Platform On-Premises prior to version 9.2. Improper input validation allows authenticated users with at least questioner privileges to inject commands in specific instructions. Exploitation could...

6.3CVSS5.9AI score0.00092EPSS
Exploits0References2
RedhatCVE
RedhatCVE
added 2026/02/06 1:30 p.m.3 views

CVE-2026-23572

Improper access control in the TeamViewer Full and Host clients Windows, macOS, Linux prior version 15.74.5 allows an authenticated user to bypass additional access controls with “Allow after confirmation” configuration in a remote session. An exploit could result in unauthorized access prior to...

7.2CVSS5.5AI score0.00064EPSS
Exploits0References1
NVD
NVD
added 2026/02/05 12:16 p.m.5 views

CVE-2026-23572

Improper access control in the TeamViewer Full and Host clients Windows, macOS, Linux prior version 15.74.5 allows an authenticated user to bypass additional access controls with “Allow after confirmation” configuration in a remote session. An exploit could result in unauthorized access prior to...

7.2CVSS0.00064EPSS
Exploits0References1
CVE
CVE
added 2026/02/05 11:51 a.m.18 views

CVE-2026-23572

The CVE-2026-23572 issue affects TeamViewer Full and Host clients for Windows, macOS, and Linux prior to 15.74.5. The vulnerability stems from improper access control that lets an authenticated user bypass the configured “Allow after confirmation” setting during a remote session, potentially gran...

7.2CVSS5.4AI score0.00064EPSS
Exploits0References1
ATTACKERKB
ATTACKERKB
added 2026/02/05 11:51 a.m.2 views

CVE-2026-23572

Improper access control in the TeamViewer Full and Host clients Windows, macOS, Linux prior version 15.74.5 allows an authenticated user to bypass additional access controls with “Allow after confirmation” configuration in a remote session. An exploit could result in unauthorized access prior to...

7.2CVSS5.4AI score0.00064EPSS
Exploits0References2
EUVD
EUVD
added 2026/02/05 11:51 a.m.3 views

EUVD-2026-5555

Improper access control in the TeamViewer Full and Host clients Windows, macOS, Linux prior version 15.74.5 allows an authenticated user to bypass additional access controls with “Allow after confirmation” configuration in a remote session. An exploit could result in unauthorized access prior to...

7.2CVSS5.4AI score0.00064EPSS
Exploits0References1
Rows per page
Query Builder