CVE-2026-23571 — MEDIUM (6.8)

Q: How severe is CVE-2026-23571?

CVE-2026-23571 has been rated MEDIUM with a CVSS base score of 6.8/10. Review the CVSS metrics above for detailed severity breakdown.

Q: Is there a patch for CVE-2026-23571?

Check the references section above for vendor advisories and patch information. Affected products include: Teamviewer Digital Employee Experience, Microsoft Windows.

Vulnerability Description

A command injection vulnerability was discovered in TeamViewer DEX (former 1E DEX), specifically within the 1E-Nomad-RunPkgStatusRequest instruction. Improper input validation allows authenticated attackers with actioner privilege to run elevated arbitrary commands on connected hosts via malicious commands injected into the instruction’s input field. Users of 1E Client version 24.5 or higher are not affected.

CVSS Score

6.8

MEDIUM

CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:U/C:H/I:H/A:H

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

HIGH

User Interaction

REQUIRED

Scope

UNCHANGED

Confidentiality

HIGH

Integrity

HIGH

Availability

HIGH

Affected Products

Vendor	Product	Versions
Teamviewer	Digital Employee Experience	< 26.1
Microsoft	Windows	-

Related Weaknesses (CWE)

CWE-20

References

https://www.teamviewer.com/en/resources/trust-center/security-bulletins/tv-2026-Vendor Advisory

FAQ

What is CVE-2026-23571?

CVE-2026-23571 is a vulnerability with a CVSS score of 6.8 (MEDIUM). A command injection vulnerability was discovered in TeamViewer DEX (former 1E DEX), specifically within the 1E-Nomad-RunPkgStatusRequest instruction. Improper input validation allows authenticated att...

How severe is CVE-2026-23571?

CVE-2026-23571 has been rated MEDIUM with a CVSS base score of 6.8/10. Review the CVSS metrics above for detailed severity breakdown.

Is there a patch for CVE-2026-23571?

Check the references section above for vendor advisories and patch information. Affected products include: Teamviewer Digital Employee Experience, Microsoft Windows.