TeamViewer ONE vulnerabilities

Latest TeamViewer ONE CVEs

Newest publication first

1. CVE-2026-12703 Bypass of 2FA for Connections via Unattended Access in TeamViewer for macOS

   Published 2026-07-29

   High·CVSS 8.0 EPSS 0.40%

   TeamViewer Full Client and Host for macOS before version 15.80 contain a business logic error that can allow an authenticated attacker to bypass a configured 2FA for Connections approval flow via Unattended Access and establish a remote connection to an affected macOS host.

2. CVE-2026-23572 Improper Access Control in TeamViewer clients

   Published 2026-02-05

   High·CVSS 7.2 EPSS 0.32%

   Improper access control in the TeamViewer Full and Host clients (Windows, macOS, Linux) prior version 15.74.5 allows an authenticated user to bypass additional access controls with “Allow after confirmation” configuration in a remote session. An exploit could result in unauthoriz...

Sources: CVE.org, NVD, CISA KEV, FIRST EPSS, OSV and public exploit-reference metadata. Product matching comes from the published CVE records. A proof-of-concept means public code exists; it is not evidence of exploitation.