What is the CVSS score of CVE-2026-12703?

CVE-2026-12703 has a CVSS 3.1 base score of 8.0 (High). CVSS vector: CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:C/C:H/I:H/A:H. EPSS exploitation probability: 0.2%.

Which versions of TeamViewer are affected by CVE-2026-12703?

TeamViewer's macOS Full Client and Host versions prior to 15.80 contain a two-factor authentication bypass that allows high-privileged authenticated users to establish unauthorized remote sessions by…. A patch is available.

How to fix or mitigate CVE-2026-12703?

Within 24 hours, inventory all macOS systems running TeamViewer Full Client or Host versions before 15.80 and identify which have Unattended Access enabled; immediately restrict access to named administrative personnel only and disable Unattended Access entirely on non-critical systems where operationally feasible. Within 7 days, activate enhanced logging and monitoring of all TeamViewer session initiations and connection approval events, implement network segmentation to isolate TeamViewer-enabled systems from general user networks, and establish a daily review schedule for suspicious connection patterns. Within 30 days, monitor TeamViewer's official security advisories for release of version 15.80 or later; upon availability, test the patched version in a staging environment and deploy to all affected macOS systems, prioritizing those handling sensitive data or administrative functions, with full organization-wide deployment targeted within 60 days of patch release.

TeamViewer CVE-2026-12703

EUVD-2026-50360 HIGH

Authentication Bypass Using an Alternate Path or Channel (CWE-288)

2026-07-29 TV

GHSA-r926-cxpx-jff4

Apple Authentication Bypass Remote Tensor One

8.0

CVSS 3.1 · Vendor: TV

Severity by source

Vendor (TV) PRIMARY

8.0 HIGH

AV:N/AC:H/PR:H/UI:N/S:C/C:H/I:H/A:H

vuln.today AI

8.0 HIGH

Attacker is network-reachable but must already hold high-privilege account/device access (PR:H) and reliably trigger a specific unenforced approval path (AC:H); a successful bypass yields full interactive control with scope change (S:C) and full CIA impact.

3.1 AV:N/AC:H/PR:H/UI:N/S:C/C:H/I:H/A:H

4.0 AV:N/AC:H/AT:N/PR:H/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N

Primary rating from Vendor (TV).

CVSS VectorVendor: TV

Attack Vector

Network

Attack Complexity

High

Privileges Required

High

User Interaction

None

Scope

Changed

Confidentiality

High

Integrity

High

Availability

High

Lifecycle Timeline

Patch available

Jul 29, 2026 - 16:02 EUVD

Analysis Generated

Jul 29, 2026 - 15:17 vuln.today

CVE Published

Jul 29, 2026 - 14:13 cve.org

HIGH 8.0

DescriptionCVE.org

TeamViewer Full Client and Host for macOS before version 15.80 contain a business logic error that can allow an authenticated attacker to bypass a configured 2FA for Connections approval flow via Unattended Access and establish a remote connection to an affected macOS host.

AnalysisAI

Two-factor authentication bypass in TeamViewer Full Client and Host for macOS before 15.80 lets an already-authenticated, high-privileged attacker circumvent the configured 2FA 'Connections approval' control on the Unattended Access feature and establish a full remote session to the target Mac. The flaw is a business-logic error in the connection-approval flow (CWE-288) rather than a memory-safety issue, and successful exploitation yields interactive control of the host. No public exploit code has been identified at time of analysis and the issue is not listed in CISA KEV.

Technical ContextAI

The affected technology is TeamViewer's remote-access stack on macOS - specifically the Unattended Access mode, which is designed to let a device be reached without a person present at the console, gated behind optional controls such as two-factor authentication for connection approval. The CPE data (cpe:2.3:a:teamviewer:remote, :tensor, :one) indicates the defect spans TeamViewer's consumer 'Remote' product and the enterprise 'Tensor' and 'One' offerings that share the same macOS client codebase. The root cause is CWE-288 (Authentication Bypass Using an Alternate Path or Channel): the 2FA approval step can be reached or satisfied through a code path that does not enforce it, so the intended second-factor check on incoming Unattended Access connections is not consistently applied.

RemediationAI

Vendor-released patch: TeamViewer 15.80 - upgrade all macOS Full Client and Host installations to version 15.80 or later, per bulletin TV-2026-1007 (https://www.teamviewer.com/en/resources/trust-center/security-bulletins/tv-2026-1007/). Until every macOS host is updated, reduce exposure by disabling Unattended Access on Macs that do not require it, restricting which TeamViewer accounts and devices are permitted to initiate connections via allowlists/trusted-device policies, and enforcing strong account credentials and conditional access so the high-privilege prerequisite is harder to meet; the trade-off is that disabling Unattended Access removes the ability to reach unattended Macs and tightening allowlists adds administrative overhead. Because the flaw defeats 2FA on the approval flow, do not treat the existing 2FA setting as a sufficient compensating control on unpatched clients.