CVE-2026-23571

A command injection vulnerability was discovered in TeamViewer DEX (former 1E DEX), specifically within the 1E-Nomad-RunPkgStatusRequest instruction. Improper input validation allows authenticated attackers with actioner privilege to run elevated arbitrary commands on connected hosts via malicious commands injected into the instruction’s input field. Users of 1E Client version 24.5 or higher are not affected.

CVSS v3 6.8 MEDIUM

6.8^/10

CVSS v3 : MEDIUM

Vector :

Exploitability : 0.9 / Impact : 5.9

Attack Vector NETWORK

Attack Complexity LOW

Privileges Required HIGH

User Interaction REQUIRED

Confidentiality Impact HIGH

Integrity Impact HIGH

Availability Impact HIGH

Scope UNCHANGED

References

Link	Resource
https://www.teamviewer.com/en/resources/trust-center/security-bulletins/tv-2026-1002/	Vendor Advisory

Configurations

Configuration 1 (hide)

AND

cpe:2.3:a:teamviewer:digital_employee_experience:*:*:*:*:*:*:*:*

cpe:2.3:o:microsoft:windows:-:*:*:*:*:*:*:*

History

17 Jun 2026, 10:21

Type	Values Removed	Values Added
Summary		(es) Una vulnerabilidad de inyección de comandos fue descubierta en TeamViewer DEX (anteriormente 1E DEX), específicamente dentro de la instrucción 1E-Nomad-RunPkgStatusRequest. Una validación de entrada inadecuada permite a atacantes autenticados con privilegio de actioner ejecutar comandos arbitrarios elevados en hosts conectados a través de comandos maliciosos inyectados en el campo de entrada de la instrucción. Los usuarios de 1E Cliente versión 24.5 o superior no se ven afectados.

11 Feb 2026, 20:22

Type	Values Removed	Values Added
First Time		Teamviewer digital Employee Experience Teamviewer Microsoft Microsoft windows
CPE		cpe:2.3:o:microsoft:windows:-:::::::* cpe:2.3:a:teamviewer:digital_employee_experience::::::::
References	~~() https://www.teamviewer.com/en/resources/trust-center/security-bulletins/tv-2026-1002/ -~~	() https://www.teamviewer.com/en/resources/trust-center/security-bulletins/tv-2026-1002/ - Vendor Advisory

29 Jan 2026, 09:16

Type	Values Removed	Values Added
New CVE

Information

Published : 2026-01-29 09:16

Updated : 2026-06-17 10:21

NVD link : CVE-2026-23571

Mitre link : CVE-2026-23571

CVE.ORG link : CVE-2026-23571

JSON object : View

Products Affected

microsoft

windows

teamviewer

digital_employee_experience

CWE

CWE-20

Improper Input Validation

{"id": "CVE-2026-23571", "cveTags": [], "metrics": {"ssvcV203": [{"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "ssvcData": {"id": "CVE-2026-23571", "role": "CISA Coordinator", "options": [{"exploitation": "none"}, {"automatable": "no"}, {"technicalImpact": "total"}], "version": "2.0.3", "timestamp": "2026-01-29T15:57:13.887818Z"}}], "cvssMetricV31": [{"type": "Secondary", "source": "psirt@teamviewer.com", "cvssData": {"scope": "UNCHANGED", "version": "3.1", "baseScore": 6.8, "attackVector": "NETWORK", "baseSeverity": "MEDIUM", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:U/C:H/I:H/A:H", "integrityImpact": "HIGH", "userInteraction": "REQUIRED", "attackComplexity": "LOW", "availabilityImpact": "HIGH", "privilegesRequired": "HIGH", "confidentialityImpact": "HIGH"}, "impactScore": 5.9, "exploitabilityScore": 0.9}]}, "affected": [{"source": "psirt@teamviewer.com", "affectedData": [{"vendor": "TeamViewer", "modules": ["1E-Nomad-RunPkgStatusRequest Instruction"], "product": "DEX", "versions": [{"status": "affected", "version": "0", "versionType": "custom", "lessThanOrEqual": "20"}], "defaultStatus": "unaffected"}]}], "published": "2026-01-29T09:16:04.867", "references": [{"url": "https://www.teamviewer.com/en/resources/trust-center/security-bulletins/tv-2026-1002/", "tags": ["Vendor Advisory"], "source": "psirt@teamviewer.com"}], "vulnStatus": "Analyzed", "weaknesses": [{"type": "Secondary", "source": "psirt@teamviewer.com", "description": [{"lang": "en", "value": "CWE-20"}]}], "descriptions": [{"lang": "en", "value": "A command injection vulnerability was discovered in TeamViewer DEX (former 1E DEX), specifically within the 1E-Nomad-RunPkgStatusRequest instruction. Improper input validation allows authenticated attackers with actioner privilege to run elevated arbitrary commands on connected hosts via malicious commands injected into the instruction\u2019s input field.\u00a0Users of 1E Client version 24.5 or higher are not affected."}, {"lang": "es", "value": "Una vulnerabilidad de inyecci\u00f3n de comandos fue descubierta en TeamViewer DEX (anteriormente 1E DEX), espec\u00edficamente dentro de la instrucci\u00f3n 1E-Nomad-RunPkgStatusRequest. Una validaci\u00f3n de entrada inadecuada permite a atacantes autenticados con privilegio de actioner ejecutar comandos arbitrarios elevados en hosts conectados a trav\u00e9s de comandos maliciosos inyectados en el campo de entrada de la instrucci\u00f3n. Los usuarios de 1E Cliente versi\u00f3n 24.5 o superior no se ven afectados."}], "lastModified": "2026-06-17T10:21:47.750", "configurations": [{"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:a:teamviewer:digital_employee_experience:*:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "8E2A5CE4-D147-45E1-8D16-3257B6E79E70", "versionEndExcluding": "26.1"}], "operator": "OR"}, {"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:o:microsoft:windows:-:*:*:*:*:*:*:*", "vulnerable": false, "matchCriteriaId": "A2572D17-1DE6-457B-99CC-64AFD54487EA"}], "operator": "OR"}], "operator": "AND"}], "sourceIdentifier": "psirt@teamviewer.com"}