CVE-2026-2695

6.3 Moyenne

Publiée le 13/05/2026 à 19:16 · Modifiée le 17/06/2026 à 12:31 · En attente d'analyse NVD · Source : psirt@teamviewer.com

Description

A command injection vulnerability was discovered in TeamViewer DEX Platform On-Premises (former 1E DEX Platform On-Premises) prior to version 9.2. Improper input validation allows authenticated users with at least questioner privileges to inject commands in specific instructions. Exploitation could lead to execution of elevated commands on devices connected to the platform.

Traduire en français

Produits concernés

TeamViewer DEX (On-Premises)

Scores CVSS

Version	Score	Source	Vecteur
3.1	6.3 Moyenne	psirt@teamviewer.com	`CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L`

Faiblesses (CWE)

CWE-20

Références

https://www.teamviewer.com/de/resources/trust-center/security-bulletins/tv-2026-1004/

Ailleurs

NVD
CVE.org
CIRCL Vulnerability-Lookup
CERT-FR
GitHub Advisories