Live › vulnerability › CVE-2026-111584
Go to dashboardA race condition during installation of TeamViewer Remote Management Patch Management for Windows, before version 26.9.1, lets a local user with low privileges replace the service executable in an insufficiently protected temporary directory. The attacker can then run arbitrary code with elevated privileges.
Summary written from the sources below. Check the originals before acting.
First seen by InfraStack 2026-10-27 16:33 UTC. All times on this page are UTC.
Windows machines where TeamViewer Remote Management Patch Management is installed or activated before version 26.9.1. Local users with low privileges are the threat, so systems with a single trusted user are at lower risk. The sources do not say which installer configurations are most exposed.
No product ranges from the sources yet.
26.9.126.9.1 or laterEach row is the first time that source carried this signal. The analyst’s rows are its own findings.
A race condition in the installation process of TeamViewer Remote Management - Patch Management for Windows prior to version 26.9.1 allows a local authenticated attacker with low privileges to execute arbitrary code with elevated privileges by replacing the service executable in an insufficiently protected temporary directory during Patch Management activation.
This page as .md · .json · in your agent: get_signal("CVE-2026-111584")
NVD data is provided by NIST and is public domain. Posts quoted belong to their authors.