8.8Alta
CVE-2026-19042Command Injection in TeamViewer Desktop Client for Linux through Chat Link Handling
Descripción
A command injection vulnerability in TeamViewer Full Client and Host for Linux prior to version 15.81.5 allows a remote attacker to execute arbitrary commands in the context of the current user via a specially crafted URL sent through the out-of-session chat feature. Exploitation requires user interaction by clicking the malicious link.
Debilidad (CWE):
CWE-78
Datos: CVE.org, NVD, CISA KEV, FIRST EPSS, Ubuntu. Se publican tal como los indican las fuentes, en inglés.
Productos y versiones afectados
| Fabricante | Producto | Versiones | |
|---|---|---|---|
| TeamViewer | Full Client | 15.0 – < 15.81.5, 14.0 – < 14.7.488838, 13.0 – < 13.2.153978 | |
| TeamViewer | Host | 15.0 – < 15.81.5, 14.0 – < 14.7.488838, 13.0 – < 13.2.153978 |