EUVD-2026-111075

An improper access control vulnerability in the IPC communication between TeamViewer Full Client or Host prior to version 15.83 and the Remote Management Monitoring component prior to version 26.10.1 allows a local authenticated attacker with low privileges to execute scripts as SYSTEM/root...

CVE-2026-92375 Local privilege escalation via improper IPC access control in TeamViewer Remote Management Monitoring

An improper access control vulnerability in the IPC communication between TeamViewer Full Client or Host prior to version 15.83 and the Remote Management Monitoring component prior to version 26.10.1 allows a local authenticated attacker with low privileges to execute scripts as SYSTEM/root...

CVE-2026-92375

An improper access control vulnerability in the IPC communication between TeamViewer Full Client or Host (prior to version 15.83) and the Remote Management Monitoring component (prior to version 26.10.1) enables a local authenticated attacker with low privileges to execute scripts as SYSTEM/root ...

CVE-2026-92375 Local privilege escalation via improper IPC access control in TeamViewer Remote Management Monitoring

An improper access control vulnerability in the IPC communication between TeamViewer Full Client or Host prior to version 15.83 and the Remote Management Monitoring component prior to version 26.10.1 allows a local authenticated attacker with low privileges to execute scripts as SYSTEM/root...

CVE-2026-92374

TeamViewer Full Client and Host for macOS prior to version 15.83 are vulnerable to a local privilege escalation via a TOCTOU race condition and improper symbolic link handling in the privileged helper. A local attacker with low privileges can bypass installer package verification to install a mal...

CVE-2026-92374 Privilege Escalation via Insecure Package Handling in TeamViewer Full Client and Host for macOS

A time-of-check time-of-use TOCTOU race condition combined with improper symbolic link handling in the privileged helper of TeamViewer Full Client and Host prior to version 15.83 for macOS allows a local attacker with low privileges to bypass installer package verification and install a malicious...

CVE-2026-92374 Privilege Escalation via Insecure Package Handling in TeamViewer Full Client and Host for macOS

A time-of-check time-of-use TOCTOU race condition combined with improper symbolic link handling in the privileged helper of TeamViewer Full Client and Host prior to version 15.83 for macOS allows a local attacker with low privileges to bypass installer package verification and install a malicious...

Lantronix EDS3000PR SSL passin command injection

Authenticated POST /ssl with certpasswd/keypasswd injected into openssl -passin pass:%s system enables root command execution. !/usr/bin/env python3 -- coding: utf-8 -- """Lantronix EDS SSL -passin pass:%s command injection RCE.""" from future import annotations import re import time from...

atvise SCADA OPC UA Authentication Bypass Unauthenticated Root RCE

atvise SCADA OPC UA Authentication Bypass Unauthenticated Root RCE """atvise SCADA OPC UA Authentication Bypass Unauthenticated Root RCE""" from future import annotations from kittysploit import from lib.protocols.http.httpclient import Httpclient import sys, os, json, random, hashlib,...

QuantaStor alertConfigSet smtpPassword command injection

Authenticated JSON-RPC alertConfigSet writes an unsanitized smtpPassword into the root qsservice alert email shell command; alertRaise triggers execution as root delayed async dispatch. !/usr/bin/env python3 -- coding: utf-8 -- """OSNexus QuantaStor alertConfigSet smtpPassword command injection...

atvise SCADA OPC UA Authentication Bypass Unauthenticated Root RCE — Detect

Fingerprint / reachability check for atvise SCADA OPC UA Authentication Bypass Unauthenticated Root RCE !/usr/bin/env python3 -- coding: utf-8 -- """Detection for atvise SCADA OPC UA Authentication Bypass Unauthenticated Root RCE""" from kittysploit import from lib.protocols.http.httpclient impor...

CatDV Server Authenticated aaftoolPath Root RCE — Detect

Fingerprint / reachability check for CatDV Server Authenticated aaftoolPath Root RCE !/usr/bin/env python3 -- coding: utf-8 -- """Detection for CatDV Server Authenticated aaftoolPath Root RCE""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner,...

Edimax BR-6478AC v2.20 - Authenticated Command Injection in the setWAN WAN-Confi — Detect

Fingerprint / reachability check for Edimax BR-6478AC v2.20 - Authenticated Command Injection in the setWAN WAN-Configuration Handler Reaching root Command Execution CWE-78 !/usr/bin/env python3 -- coding: utf-8 -- """Detection for Edimax BR-6478AC v2.20 - Authenticated Command Injection in the...

Opengear NGCS Firmware 25.11.8 — PDU `name` Command Injection (Authenticated Adm — Detect

Fingerprint / reachability check for Opengear NGCS Firmware 25.11.8 — PDU name Command Injection Authenticated Administrator to Root RCE !/usr/bin/env python3 -- coding: utf-8 -- """Detection for Opengear NGCS Firmware 25.11.8 — PDU name Command Injection Authenticated Administrator to Root R"""...

TRENDnet TV-IP302PI 1.02.38 - Command Injection in the NTP Server Address Reachi — Detect

Fingerprint / reachability check for TRENDnet TV-IP302PI 1.02.38 - Command Injection in the NTP Server Address Reaching Root Execution Through a Shell-Form system Call CWE-78 !/usr/bin/env python3 -- coding: utf-8 -- """Detection for TRENDnet TV-IP302PI 1.02.38 - Command Injection in the NTP Serv...

Wyn Enterprise Unauthenticated Root RCE (Token Forgery + Zip-Slip + Provider Loa — Detect

Fingerprint / reachability check for Wyn Enterprise Unauthenticated Root RCE Token Forgery + Zip-Slip + Provider Load !/usr/bin/env python3 -- coding: utf-8 -- """Detection for Wyn Enterprise Unauthenticated Root RCE Token Forgery + Zip-Slip + Provider Load""" from kittysploit import from...

CatDV aaftoolPath authenticated root RCE

Login to CatDV web API, PUT server-config aaftoolPath, trigger AAF export. Place the script on the host via sshkey or pre-stage at aaftoolpath. """CatDV authenticated aaftoolPath override → AAF export root RCE.""" from future import annotations import base64 import json import os import re import...

Server Technology PRO3X port_mux listener override root RCE

Authenticated JSON-RPC setConfiguration overrides protolistener program to /bin/sh; TCP connect triggers execv as root. """Server Technology PRO3X portmux listener program override root RCE.""" from future import annotations import json import re import socket from kittysploit import from...

VitalPBX asterisk_cli System() root RCE

Authenticated admin POST index.php asteriskcli runCommand adds dialplan System extension and originates a call to run as root. !/usr/bin/env python3 -- coding: utf-8 -- """VitalPBX asteriskcli dialplan System root privilege escalation.""" from future import annotations import json import re impor...

Auerswald COMmander 6000 / 6000R 8.6D - Path Traversal in the Provisioning Archi — Detect

Fingerprint / reachability check for Auerswald COMmander 6000 / 6000R 8.6D - Path Traversal in the Provisioning Archive Import Leading to Unauthenticated Root Code Execution CWE-22 !/usr/bin/env python3 -- coding: utf-8 -- """Detection for Auerswald COMmander 6000 / 6000R 8.6D - Path Traversal in...