Vulnerability · Published Oct 27, 2026 · Assigned by TV
CVE-2026-92376Local Privilege Escalation via IPC Broker Impersonation in TeamViewer Remote Management Monitoring for Windows
High 7.8
In plain English
A high-severity improper authentication in Remote Management - Monitoring from TeamViewer. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 0.1% (higher than 3% of all known vulnerabilities).
Official description
Improper authentication in the inter-process communication (IPC) mechanism of TeamViewer Remote Management Monitoring for Windows prior to version 26.10.1 allows a local authenticated attacker with low privileges to impersonate the IPC broker and cause the Monitoring service to execute arbitrary code with NT AUTHORITY\SYSTEM privileges, resulting in local privilege escalation.
Affected products (as reported)
| Vendor | Product | Versions |
|---|---|---|
| TeamViewer | Remote Management - Monitoring | 0 – before 26.10.1 |
Weakness: CWE-287 · Vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H