Vulnerability intelligence

CVE-2026-19042

A command injection vulnerability in TeamViewer Full Client and Host for Linux prior to version 15.81.5 allows a remote attacker to execute arbitrary commands in the context of the current user via a specially crafted URL sent through the out-of-session chat feature. Exploitation requires user interaction by clicking the malicious link.

CVSS Score

8.8

High

EPSS — Exploit Probability

2.0%

Riskier than 80% of all CVEs · checked 2026-10-18

Exploitation

Not in CISA KEV

KEV does not include every exploited vulnerability

Remediation

Unconfirmed

Check vendor advisories

NVD entry

1 article across 1 outlet · first covered Aug 27, 2026 · latest Aug 27, 2026

Coverage timeline

TeamViewer fixes critical command injection, path traversal bugs
securityonline.info · Aug 27, 2026