CVE-2026-111584

High

Description

A race condition in the installation process of TeamViewer Remote Management - Patch Management for Windows prior to version 26.9.1 allows a local authenticated attacker with low privileges to execute arbitrary code with elevated privileges by replacing the service executable in an insufficiently protected temporary directory during Patch Management activation.

SeverityHigh

CVSS7.3

Exploit probability—

Product

TeamViewer Remote - Patch Management

PublishedOct 27, 2026

First seenOct 27, 2026

Weakness typeCWE-269Improper privilege management

How to fix

Update

TeamViewer TeamViewer Remote - Patch Management26.9.1, 24.12.5 (Legacy version for v14.7 client) or later

Vendor advisories

teamviewer.com/en/resources/trust-center/security-bulletins/tv-2026-1012/

Affected products

Product	Affected versions	Fixed in
TeamViewer TeamViewer Remote - Patch Management	v < 26.9.1, 0 (Legacy version for v14.7 client) ≤ v < 24.12.5 (Legacy version for v14.7 client)	26.9.1, 24.12.5 (Legacy version for v14.7 client)

Check your version

Choose the product and enter the version you run to see whether it falls in the affected range.

In the Intelligence 360 plan

Attack Surface Management

See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.