Vulnerability intelligence

CVE-2026-16444

Improper neutralization of path traversal sequences in TeamViewer Desktop Clients prior Version 15.81.5 allows an authenticated remote session participant to write files to unintended locations on the local file system via file transfer or virtual file clipboard mechanisms. An attacker can leverage this behavior to achieve arbitrary file write and potentially execute code with the privileges of the affected user.

CVSS Score

7.5

High

EPSS — Exploit Probability

0.3%

Riskier than 17% of all CVEs · checked 2026-10-19

Exploitation

Not in CISA KEV

KEV does not include every exploited vulnerability

Remediation

Unconfirmed

Check vendor advisories

NVD entry

1 article across 1 outlet · first covered Aug 27, 2026 · latest Aug 27, 2026

Coverage timeline

TeamViewer fixes critical command injection, path traversal bugs
securityonline.info · Aug 27, 2026