CVE-2026-19042

8.8 Élevée

Publiée le 26/08/2026 à 12:16 · Modifiée le 01/09/2026 à 22:50 · Analyse NVD reportée · Source : psirt@teamviewer.com

Description

A command injection vulnerability in TeamViewer Full Client and Host for Linux prior to version 15.81.5 allows a remote attacker to execute arbitrary commands in the context of the current user via a specially crafted URL sent through the out-of-session chat feature. Exploitation requires user interaction by clicking the malicious link.

Traduire en français

Produits concernés

TeamViewer Full Client
TeamViewer Host

Scores CVSS

Version	Score	Source	Vecteur
3.1	8.8 Élevée	psirt@teamviewer.com	`CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H`

Faiblesses (CWE)

CWE-78

Références

https://www.teamviewer.com/en/resources/trust-center/security-bulletins/tv-2026-1009/

Ailleurs

NVD
CVE.org
CIRCL Vulnerability-Lookup
CERT-FR
GitHub Advisories