CVE-2026-8381

MediumCVSS 5.4/10Last modified Jul 23, 2026

Description

A broken access control vulnerability exists in the TeamViewer DEX Platform (On‑Premises) prior version 9.2. Certain backend API endpoints do not correctly enforce authorization checks, allowing an authenticated user with low privileges to perform actions and access resources intended only for higher‑privileged roles. An attacker with low‑privileged credentials may exploit this to gain unauthorized access to administrative or sensitive functionality.

Metrics

CVSS 3.1 5.4/10CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N

Weakness enumeration

CWE-862

Affected software

Source: the vendor's advisory (CNA). NVD analysis pending.

No affected versions have been published.

Timeline

Published
May 22, 2026
Last modified
Jul 23, 2026
NVD status
Awaiting Analysis

Related CVEs from 2026

CVE-2026-838133.1Twisted is an event-based framework for internet applications, supporting Python 3.6+. Prior to 26.10.0rc1, twisted.names.dns.DNSDatagramProCVE-2026-83825.3The Advanced Custom Fields (ACF®) plugin for WordPress is vulnerable to authorization bypass in all versions up to, and including, 6.8.1. ThCVE-2026-838267.8Untrusted pointer dereference in Windows Error Reporting allows an authorized attacker to elevate privileges locally.CVE-2026-838277.0Heap-based buffer overflow in Windows Bluetooth Port Driver allows an authorized attacker to elevate privileges locally.CVE-2026-838287.8Heap-based buffer overflow in Windows MIDI Service Module allows an authorized attacker to elevate privileges locally.CVE-2026-838297.8Heap-based buffer overflow in Microsoft Windows Search Component allows an authorized attacker to elevate privileges locally.CVE-2026-83835.3The LearnPress WordPress plugin before 4.3.7 does not gate the `edit` context on one of its REST endpoint behind the `edit_users` capabilitCVE-2026-838307.8Heap-based buffer overflow in Windows COM+ Event System Service allows an authorized attacker to elevate privileges locally.CVE-2026-838327.8Out-of-bounds read in Windows Spaceport.sys allows an authorized attacker to elevate privileges locally.CVE-2026-838337.8Heap-based buffer overflow in Windows Kernel allows an authorized attacker to elevate privileges locally.CVE-2026-838347.0Use after free in Windows Kernel-Mode Drivers allows an authorized attacker to elevate privileges locally.CVE-2026-838355.5Buffer over-read in Windows Common Log File System Driver allows an authorized attacker to disclose information locally.
CVE-2026-8381: Medium severity, CVSS 5.4 | Vulnix