CVE-2026-12703 - Vulnerability Details - OpenCVE

TeamViewer Full Client and Host for macOS before version 15.80 contain a business logic error that can allow an authenticated attacker to bypass a configured 2FA for Connections approval flow via Unattended Access and establish a remote connection to an affected macOS host.

No CVSS v4.0

Attack Vector Network

Attack Complexity High

Privileges Required High

Scope Changed

Confidentiality Impact High

Integrity Impact High

Availability Impact High

User Interaction None

No CVSS v3.0

No CVSS v2

This CVE is not in the KEV list.

No EPSS score available.

Exploitation none

Automatable no

Technical Impact total

No data.

No data.

No data.

No data.

References

Link	Providers
https://www.teamviewer.com/en/resources/trust-center/security-bulletins/tv-2026-1007/

History

Wed, 29 Jul 2026 15:30:00 +0000

Type	Values Removed	Values Added
Metrics		ssvc `{'options': {'Automatable': 'no', 'Exploitation': 'none', 'Technical Impact': 'total'}, 'version': '2.0.3'}`

Wed, 29 Jul 2026 14:45:00 +0000

Type	Values Removed	Values Added
Description		TeamViewer Full Client and Host for macOS before version 15.80 contain a business logic error that can allow an authenticated attacker to bypass a configured 2FA for Connections approval flow via Unattended Access and establish a remote connection to an affected macOS host.
Title		Bypass of 2FA for Connections via Unattended Access in TeamViewer for macOS
Weaknesses		CWE-288
References		https://www.teamviewer.com/en/resources/trust-center/security-bulletins/tv-2026-1007/
Metrics		cvssV3_1 `{'score': 8, 'vector': 'CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:C/C:H/I:H/A:H'}`

MITRE

Status: PUBLISHED

Assigner: TV

Published: 2026-07-29T14:13:19.692Z

Updated: 2026-07-29T15:07:08.712Z

Reserved: 2026-06-19T10:17:46.376Z

Link: CVE-2026-12703

Vulnrichment

Updated: 2026-07-29T15:07:05.457Z

NVD

No data.

Redhat

No data.

OpenCVE Enrichment

No data.

{"dataType": "CVE_RECORD", "dataVersion": "5.2", "cveMetadata": {"cveId": "CVE-2026-12703", "assignerOrgId": "13430f76-86eb-43b2-a71c-82c956ef31b6", "state": "PUBLISHED", "assignerShortName": "TV", "dateReserved": "2026-06-19T10:17:46.376Z", "datePublished": "2026-07-29T14:13:19.692Z", "dateUpdated": "2026-07-29T15:07:08.712Z"}, "containers": {"cna": {"providerMetadata": {"orgId": "13430f76-86eb-43b2-a71c-82c956ef31b6", "shortName": "TV", "dateUpdated": "2026-07-29T14:13:19.692Z"}, "title": "Bypass of 2FA for Connections via Unattended Access in TeamViewer for macOS", "problemTypes": [{"descriptions": [{"lang": "en", "cweId": "CWE-288", "description": "CWE-288 Authentication bypass using an alternate path or channel", "type": "CWE"}]}], "impacts": [{"capecId": "CAPEC-115", "descriptions": [{"lang": "en", "value": "CAPEC-115 Authentication Bypass"}]}], "affected": [{"vendor": "TeamViewer", "product": "Remote", "platforms": ["MacOS"], "modules": ["Full Client", "Host"], "versions": [{"status": "affected", "version": "15.00", "lessThan": "15.80", "versionType": "custom"}], "defaultStatus": "unaffected"}, {"vendor": "TeamViewer", "product": "Tensor", "platforms": ["MacOS"], "modules": ["Full Client", "Host"], "versions": [{"status": "affected", "version": "15.00", "lessThan": "15.80", "versionType": "custom"}], "defaultStatus": "unaffected"}, {"vendor": "TeamViewer", "product": "ONE", "platforms": ["MacOS"], "modules": ["Full Client", "Host"], "versions": [{"status": "affected", "version": "15.00", "lessThan": "15.80", "versionType": "custom"}], "defaultStatus": "unaffected"}], "descriptions": [{"lang": "en", "value": "TeamViewer Full Client and Host\u00a0for macOS before version 15.80\u00a0contain\u00a0a business logic error that can allow an authenticated attacker to bypass\u00a0a\u00a0configured 2FA\u00a0for\u00a0Connections approval flow\u00a0via\u00a0Unattended\u00a0Access\u00a0and\u00a0establish\u00a0a remote connection to an affected macOS host.", "supportingMedia": [{"type": "text/html", "base64": false, "value": "TeamViewer Full Client and Host for macOS before version 15.80 contain a business logic error that can allow an authenticated attacker to bypass a configured 2FA for Connections approval flow via Unattended Access and establish a remote connection to an affected macOS host. "}]}], "references": [{"url": "https://www.teamviewer.com/en/resources/trust-center/security-bulletins/tv-2026-1007/", "tags": ["vendor-advisory"]}], "metrics": [{"format": "CVSS", "scenarios": [{"lang": "en", "value": "GENERAL"}], "cvssV3_1": {"version": "3.1", "attackVector": "NETWORK", "attackComplexity": "HIGH", "privilegesRequired": "HIGH", "userInteraction": "NONE", "scope": "CHANGED", "confidentialityImpact": "HIGH", "integrityImpact": "HIGH", "availabilityImpact": "HIGH", "baseSeverity": "HIGH", "baseScore": 8, "vectorString": "CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:C/C:H/I:H/A:H"}}], "solutions": [{"lang": "en", "value": "Update to the latest version (15.80 or the latest version available)", "supportingMedia": [{"type": "text/html", "base64": false, "value": "Update to the latest version (15.80 or the latest version available)"}]}], "credits": [{"lang": "en", "value": "We thank dameb for the discovery and responsible disclosure", "type": "finder"}], "source": {"discovery": "UNKNOWN"}, "x_generator": {"engine": "Vulnogram 1.0.4"}}, "adp": [{"metrics": [{"other": {"type": "ssvc", "content": {"timestamp": "2026-07-29T15:07:03.248622Z", "id": "CVE-2026-12703", "options": [{"Exploitation": "none"}, {"Automatable": "no"}, {"Technical Impact": "total"}], "role": "CISA Coordinator", "version": "2.0.3"}}}], "title": "CISA ADP Vulnrichment", "providerMetadata": {"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", "dateUpdated": "2026-07-29T15:07:08.712Z"}}]}}

{"dataType": "CVE_RECORD", "containers": {"adp": [{"title": "CISA ADP Vulnrichment", "metrics": [{"other": {"type": "ssvc", "content": {"id": "CVE-2026-12703", "role": "CISA Coordinator", "options": [{"Exploitation": "none"}, {"Automatable": "no"}, {"Technical Impact": "total"}], "version": "2.0.3", "timestamp": "2026-07-29T15:07:03.248622Z"}}}], "providerMetadata": {"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", "dateUpdated": "2026-07-29T15:07:05.457Z"}}], "cna": {"title": "Bypass of 2FA for Connections via Unattended Access in TeamViewer for macOS", "source": {"discovery": "UNKNOWN"}, "credits": [{"lang": "en", "type": "finder", "value": "We thank dameb for the discovery and responsible disclosure"}], "impacts": [{"capecId": "CAPEC-115", "descriptions": [{"lang": "en", "value": "CAPEC-115 Authentication Bypass"}]}], "metrics": [{"format": "CVSS", "cvssV3_1": {"scope": "CHANGED", "version": "3.1", "baseScore": 8, "attackVector": "NETWORK", "baseSeverity": "HIGH", "vectorString": "CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:C/C:H/I:H/A:H", "integrityImpact": "HIGH", "userInteraction": "NONE", "attackComplexity": "HIGH", "availabilityImpact": "HIGH", "privilegesRequired": "HIGH", "confidentialityImpact": "HIGH"}, "scenarios": [{"lang": "en", "value": "GENERAL"}]}], "affected": [{"vendor": "TeamViewer", "modules": ["Full Client", "Host"], "product": "Remote", "versions": [{"status": "affected", "version": "15.00", "lessThan": "15.80", "versionType": "custom"}], "platforms": ["MacOS"], "defaultStatus": "unaffected"}, {"vendor": "TeamViewer", "modules": ["Full Client", "Host"], "product": "Tensor", "versions": [{"status": "affected", "version": "15.00", "lessThan": "15.80", "versionType": "custom"}], "platforms": ["MacOS"], "defaultStatus": "unaffected"}, {"vendor": "TeamViewer", "modules": ["Full Client", "Host"], "product": "ONE", "versions": [{"status": "affected", "version": "15.00", "lessThan": "15.80", "versionType": "custom"}], "platforms": ["MacOS"], "defaultStatus": "unaffected"}], "solutions": [{"lang": "en", "value": "Update to the latest version (15.80 or the latest version available)", "supportingMedia": [{"type": "text/html", "value": "Update to the latest version (15.80 or the latest version available)", "base64": false}]}], "references": [{"url": "https://www.teamviewer.com/en/resources/trust-center/security-bulletins/tv-2026-1007/", "tags": ["vendor-advisory"]}], "x_generator": {"engine": "Vulnogram 1.0.4"}, "descriptions": [{"lang": "en", "value": "TeamViewer Full Client and Host\u00a0for macOS before version 15.80\u00a0contain\u00a0a business logic error that can allow an authenticated attacker to bypass\u00a0a\u00a0configured 2FA\u00a0for\u00a0Connections approval flow\u00a0via\u00a0Unattended\u00a0Access\u00a0and\u00a0establish\u00a0a remote connection to an affected macOS host.", "supportingMedia": [{"type": "text/html", "value": "TeamViewer Full Client and Host for macOS before version 15.80 contain a business logic error that can allow an authenticated attacker to bypass a configured 2FA for Connections approval flow via Unattended Access and establish a remote connection to an affected macOS host. ", "base64": false}]}], "problemTypes": [{"descriptions": [{"lang": "en", "type": "CWE", "cweId": "CWE-288", "description": "CWE-288 Authentication bypass using an alternate path or channel"}]}], "providerMetadata": {"orgId": "13430f76-86eb-43b2-a71c-82c956ef31b6", "shortName": "TV", "dateUpdated": "2026-07-29T14:13:19.692Z"}}}, "cveMetadata": {"cveId": "CVE-2026-12703", "state": "PUBLISHED", "dateUpdated": "2026-07-29T15:07:08.712Z", "dateReserved": "2026-06-19T10:17:46.376Z", "assignerOrgId": "13430f76-86eb-43b2-a71c-82c956ef31b6", "datePublished": "2026-07-29T14:13:19.692Z", "assignerShortName": "TV"}, "dataVersion": "5.2"}