- Kubalulekile ukubuyekeza i-Full Client kanye ne-Host kunguqulo engu-15.82 noma ngaphezulu ukuze kulungiswe ubuthakathaka obubalulekile bokuphepha.
- Ubuthakathaka obutholakele buvumela ukukhushulwa kwamalungelo kanye nokusetshenziswa kwekhodi ekude ku-Windows, macOS, kanye ne-Linux.
- Ukuphepha okuphelele kudinga ukuhlanganisa ama-patches asemthethweni nokusetshenziswa kwe-MFA, umgomo welungelo elincane, kanye nokuqapha ama-log.
Uma usebenzisa i-TeamViewer ukuze uthole ukwesekwa kobuchwepheshe noma ukuphathwa kwethimba okude, uyazi ukuthi iyithuluzi elinamandla, kodwa njengazo zonke izinhlelo zokusebenza eziyinkimbinkimbi, ayiphelele. Muva nje kuye kwavela ubuthakathaka obukhulu bokuphepha obuthinta izinguqulo ezahlukene zeklayenti kanye nomphathi, okusho ukuthi uma ungemuva kokubuyekezwa, ungase ube sengozini yabaphangi.
Isimo sibi kakhulu ngoba lobu buthakathaka abuthinti uhlelo olulodwa kuphela; busakazeke ku -Windows, Linux, kanye ne-macOS . Ukuze ugweme izinto ezimangazayo ezingathandeki, akwanele ukwazi ukuthi ulufakile uhlelo. Udinga ukuthola imininingwane bese uhlola inguqulo eqondile, umkhiqizo, kanye nesistimu yokusebenza ukuqinisekisa ukuthi azikho ubuthakathaka obungasetshenziswa kabi.
Kutholakale ukwehluleka okubucayi kanye nezingozi zako
Iphephandaba elisemthethweni i-TV-2026-1010 liqokomise ama-CVE amahlanu anobunzima obukhulu. Okuyingozi kakhulu kulawa yi -CVE-2026-92370 , enamaphuzu e-CVSS angu-8.8. Lokhu kusengozini kukhulu kakhulu ngoba kuvumela imikhawulo yokulawula ukufinyelela ehlelwe ngumlawuli ukuthi idlulwe, okungase kuholele ekusebenziseni ikhodi ekude. Empeleni, othile angenza izenzo ozivimbele ngokusobala esimisweni.
Ngakolunye uhlangothi, sine -CVE-2026-19743 , egxile ekukhulisweni kwamalungelo endawo. Lapha, umsebenzisi usevele ungene ohlelweni kodwa enezimvume ezilinganiselwe angalawula izindlela zamafayela ukuze athole i-SYSTEM noma amalungelo ezimpande . Cabanga ngomhlaseli engena njengomsebenzisi ojwayelekile bese ngokuzumayo eba umlawuli ophelele wesistimu; yilapho inkinga yangempela iqala khona.
Asikwazi ukukhohlwa izingozi ezihlobene namafayela. I-CVE-2026-92368 ithinta labo abavula ukuqoshwa kweseshini ngesandiso se-.tvs ku-macOS kanye ne-Linux. Ifayela elinonya lingabangela ukugcwala kwe-buffer kwimemori , okuvumela umhlaseli ukuthi asebenzise ikhodi ngemvume yomsebenzisi ovula ifayela. Ngakho-ke, ukuvula amafayela avela emithonjeni engabazisayo kufana nokudlala i-roulette yaseRussia.
Okokugcina, kunezinkinga ezithile ezifana ne -CVE-2026-92369 , okuyisimo somjaho (i-TOCTOU) ku-Windows installer esivumela ukwenyuka kwamalungelo, kanye ne -CVE-2026-92371 , ethinta ukuqoshwa kweseshini yamafu ku-Linux ngenxa yokuqinisekiswa kwendlela okungekuhle.
Indlela yokulungisa inkinga nokuthi yiziphi izinguqulo okufanele uzifake
Isixazululo sicacile futhi siqondile: buyekeza kunguqulo 15.82 noma inguqulo yakamuva etholakalayo. Lokhu kusebenza kokubili ku-Full Client kanye ne-TeamViewer Host, okuvame ukunganakwa kumaseva namadivayisi okufinyelela anganakiwe. Uma usebenzisa izinguqulo ezindala kakhulu ezisagcinwa, kuneziqeshana ezithile ezitholakalayo kuye ngegatsha.
- Ku-Windows 7 no-8, inguqulo efanele yile 15.64.8.
- Egatsheni le-14.7, kufanele ubheke inguqulo 14.7.48855.
- Kugatsha 13.2, izinguqulo ziyahlukahluka: 13.2.36230 ku-Windows, 13.2.153995 ku-Linux kanye no-13.2.153994 ku-macOS.
Kubaluleke kakhulu ukungakhohliswa ama-imeyili aphuthumayo athembisa izibuyekezo ezisheshayo. Izigebengu eziningi ze-inthanethi zisebenzisa lezi zixwayiso ukuze ziqalise imikhankaso yobugebengu bokweba imininingwane ebucayi ngezixhumanisi ezingamanga noma ama-executable anonya . Okuwukuphela kwendlela ephephile yokubuyekeza iwukusebenzisa iziteshi ezisemthethweni ze-TeamViewer noma izinhlelo zokuthunyelwa kwenkampani yakho.
Izindlela zokuphepha ezengeziwe zamabhizinisi
Ukulungisa isofthiwe kuyisinyathelo sokuqala, kodwa akuyona inkinga enkulu. Ukuze uthole ukuthula kwengqondo, kuyalulekwa ukusebenzisa isu elijulile lokuzivikela . Lokhu kufaka phakathi ukuvumela ukuqinisekiswa kwezinto eziningi (i-MFA), ngoba nakuba kungalungisi iphutha lekhodi, kuvimbela umuntu ekutholeni ukufinyelela esebenzisa iphasiwedi eyebiwe kuphela. Kubalulekile futhi ukusebenzisa isimiso selungelo elincane , ukuqinisekisa ukuthi abasebenzisi abasebenzi njengabaphathi bendawo ngaphandle uma kudingeka ngempela.
Ezindaweni zobungcweti, amathuluzi okuqapha afana ne-SIEM noma i-EDR awusizo kakhulu . Lezi zixazululo zikuvumela ukuthi uthole ukuziphatha okungavamile, njengezinqubo ezingalindelekile noma izinguquko ezisheshayo kumafayela avikelwe, okungase kubonise ukuthi othile usevele wasebenzisa ubuthakathaka ngaphambi kokuthi usebenzise i-patch. Ukugcina umlando welogi ophelele (kuze kube yizinsuku ezingu-400) kubalulekile ekuhlaziyweni kwe-forensic uma uthola ukuhlaselwa okwenzeke ezinyangeni ezedlule.
Ngaphezu kwalokho, manje yisikhathi esifanele sokuhlanza ukufinyelela. Izinkampani eziningi zinezimvume zokufinyelela ezinganakwa noma ama-akhawunti ezisebenzi zangaphambili ezisasebenza. Ukubukeza ukuthi obani abangaxhuma nokususa noma yini engabalulekile kunciphisa kakhulu indawo yokuhlasela.
Umbono womlando kanye nokuzibophezela kwenkampani
I-TeamViewer ayiyona into entsha kulokhu. Eminyakeni edlule, ibhekane nokwesaba okuningana, kusukela ekubuthakathakeni kwe-DLL ngo-2010 kuya ezigamekweni zokuqhekeka kwamaphasiwedi ngo-2020 kanye nokuhlaselwa okuqondiswe emaqenjini afana ne-APT29 ngo-2024. Kodwa-ke, inkampani iqinise ukuphepha kwayo ngokusebenzisa i-Secure Development Lifecycle (S-SDLC) kanye nezitifiketi ezifana ne -ISO 27001 kanye ne-SOC2.
Basebenzisa amasu athuthukile njengokuhlaziywa kwekhodi okungaguquki kanye nokuguquguquka (i-SAST/DAST) futhi benza izivivinyo zokungena zaminyaka yonke ngamasignesha angaphandle. Yonke isofthiwe yabo isayinwe ngedijithali yi-DigiCert, okuvumela amathuluzi okuphepha ukuqinisekisa ukuthi uhlelo luyiqiniso futhi alushintshwanga ngumuntu wesithathu.
Ukugcina isofthiwe ivuselelwe kunguqulo 15.82, ukuphatha ngokunamandla ukufinyelela okukude, nokuhlanganisa ukuphinda kwenziwe ngezingqimba zokuphepha njenge-MFA kanye nokuqapha okuqhubekayo kuyindlela kuphela yokusebenzisa amandla e-TeamViewer ngaphandle kokubeka ingqalasizinda ye-IT yenhlangano engozini.