CVE-2026-12703

EUVD-2026-50360
TeamViewer Full Client and Host for macOS before version 15.80 contain a business logic error that can allow an authenticated attacker to bypass a configured 2FA for Connections approval flow via Unattended Access and establish a remote connection to an affected macOS host.
ProviderTypeBase ScoreAtk. VectorAtk. ComplexityPriv. RequiredVector
TVCNA
8 HIGH
NETWORK
HIGH
HIGH
CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:C/C:H/I:H/A:H
Base Score
CVSS 3.x
EPSS Score
Percentile: 14.34%
Early Detection
Affected products identified ahead of NVD analysis through intelligence sources.
VendorProductVersionSource
teamviewerremote
15.0 ≤
𝑥
< 15.80
CNA
Common Weakness Enumeration
References
https://www.teamviewer.com/en/resources/trust-center/security-bulletins/tv-2026-1007/