CVE-2026-8381
A broken access control vulnerability exists in the TeamViewer DEX Platform (On‑Premises) prior version 9.2. Certain backend API endpoints d
CVSS
5.4
Medio
EPSS
0.1%
p4
KEV
—
Exploit Today
1
0-100
Publicado: 22 may 2026 · Última mod.: 23 jul 2026 · CWE-862
0.1%EPSS · 30 días0.1%
2026-06-302026-07-26
A broken access control vulnerability exists in the TeamViewer DEX Platform (On‑Premises) prior version 9.2. Certain backend API endpoints do not correctly enforce authorization checks, allowing an authenticated user with low privileges to perform actions and access resources intended only for higher‑privileged roles. An attacker with low‑privileged credentials may exploit this to gain unauthorized access to administrative or sensitive functionality.
CVECVSSEPSSKEVRExplotTítuloVis.
CVE-2026-664775.3 MED—
———Unauthenticated Broken Access Control in Gillion <= 4.13 versions.2hCVE-2026-664425.4 MED—
———Subscriber Broken Access Control in YayPricing <= 3.5.6 versions.2hCVE-2026-655685.0 MED—
———Contributor Broken Access Control in Visual Composer Website Builder <= 45.15.0 versions.2hCVE-2026-655675.3 MED—
———Unauthenticated Broken Access Control in Event Tickets <= 5.29.0.1 versions.2hCVE-2026-654356.5 MED—
———Unauthenticated Broken Access Control in Thrive Leads Version <= 10.9.2 versions.2hCVE-2026-654336.5 MED—
———Subscriber Broken Access Control in RT Mega Menu – Mega Menu Builder for Elementor & Gutenberg <= 1.5.1 versions.2h