7.8
HighCVSS 3.1 · from TV
CVE-2026-92376
Local Privilege Escalation via IPC Broker Impersonation in TeamViewer Remote Management Monitoring for Windows
Remote Management - Monitoring · Improper authentication · CWE-287AffectedRemote Management - Monitoring
FixUpdate to 26.10.1 or newer
PublishedOct 27, 15:11 · TV
ScoredOct 27 · 7.8 · TV
Exploit code publicNone known · checked 21:18 UTC
ExploitedNone known · CISA KEV checked 22:05 UTC
What we know
No known exploitation. CISA KEV, checked 22:05 UTC.
No public exploit code known. Exploit-DB, Metasploit, Nuclei, checked 21:18 UTC.
An attacker needs local access to the machine. CVSS: local.
A successful attack can read and change data and take the service down. CVSS: high impact on confidentiality, integrity and availability.
Description
Improper authentication in the inter-process communication (IPC) mechanism of TeamViewer Remote Management Monitoring for Windows prior to version 26.10.1 allows a local authenticated attacker with low privileges to impersonate the IPC broker and cause the Monitoring service to execute arbitrary code with NT AUTHORITY\SYSTEM privileges, resulting in local privilege escalation.
From TV
Affected and fixed versions
ProductAffectedFixed inRemote Management - Monitoringbefore 26.10.126.10.1
Exploit code
Exploit-DBnone knownMetasploitnone knownNucleinone known