VULNERABILITY INTELLIGENCE

CVE-2025-64989

CVSS score7.2 HIGH

EPSS probability1.10%

CISA KEVNot currently listed

Published2025-12-11

Last modified2026-10-08

Description

A command injection vulnerability was discovered in TeamViewer DEX (former 1E DEX), specifically within the 1E-Explorer-TachyonCore-FindFileBySizeAndHash instruction prior V21.1. Improper input validation, allowing authenticated attackers with Actioner privileges to inject arbitrary commands. Exploitation enables remote execution of elevated commands on devices connected to the platform.