{"id":"CVE-2026-111583","url":"https://www.cyber-defence.io/tools/cve/CVE-2026-111583","generatedAt":"2026-10-28T03:42:09.616Z","title":"Improper access control in the installer staging directory used by TeamViewer Full Client and Host prior to version 15.82 for Windows during installation of Advanced Asset Management allows a local authenticated user with low privileges to execute…","description":"Improper access control in the installer\nstaging directory used by TeamViewer Full Client and Host prior to version\n15.82 for Windows during installation of Advanced Asset Management allows a\nlocal authenticated user with low privileges to execute arbitrary commands as\nSYSTEM. An attacker can place a crafted installer options file that is\nprocessed by the Advanced Asset Management installer during service activation.","published":"2026-10-27T16:17:30.000Z","lastModified":"2026-10-27T16:17:30.000Z","status":"Received","sourceIdentifier":"psirt@teamviewer.com","cvss":{"version":"3.1","score":7.3,"severity":"HIGH","vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H"},"cwe":["CWE-269"],"affected":[],"epss":null,"kev":{"listed":false},"exploits":{"count":0,"verified":false,"firstPublished":null,"source":"Exploit-DB (https://gitlab.com/exploit-database/exploitdb)","entries":[]},"verdict":{"level":"high","text":"High impact if exploited, but EPSS currently rates exploitation as unscored. Schedule it in the normal patch cycle and watch for a rise in EPSS or a public exploit."},"changes":[{"kind":"new","label":"New CVE","at":"2026-10-27T16:17:30.000Z","detail":{"score":"7.3","severity":"HIGH","publishedAt":"2026-10-27T16:17:29.643Z"},"summary":"New CVE, high severity (CVSS 7.3)."}],"references":[{"url":"https://www.teamviewer.com/en/resources/trust-center/security-bulletins/tv-2026-1012/","source":"psirt@teamviewer.com"}],"sources":{"nvd":"https://nvd.nist.gov/vuln/detail/CVE-2026-111583","epss":"https://www.first.org/epss/","kev":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog","exploitdb":"https://www.exploit-db.com/"},"licence":"CC BY 4.0 — link back to the CVE Explorer if you publish the results; upstream data remains subject to its own terms."}