CVE-2026-12703CWE-288

Bypass of 2FA for Connections via Unattended Access in TeamViewer for macOS

High · published July 29, 2026

CVSS v3.1
8.0
EPSS
0%
Percentile
32.8
In the wild
Unconfirmed
What it is

TeamViewer Full Client and Host for macOS before version 15.80 contain a business logic error that can allow an authenticated attacker to bypass a configured 2FA for Connections approval flow via Unattended Access and establish a remote connection to an affected macOS host.

The record
Technical detail
CVSS v3.1
8.0 · HIGH
Vector
CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:C/C:H/I:H/A:H
CVSS v4.0
Not supplied
EPSS
0.00397 · 32.8th percentile
Weakness
CWE-288 · Authentication Bypass Using an Alternate Path or Channel
Published
2026-07-29T14:13Z
EPSS history
Timeline
  • 29 JUL 14:13Z
    Bypass of 2FA for Connections via Unattended Access in TeamViewer for macOS
    cvelistv5