VULNERABILITY INTELLIGENCE

CVE-2026-23563

CVSS score5.7 MEDIUM
EPSS probability0.23%
CISA KEVNot currently listed
Published2026-01-29
Last modified2026-06-17
CVSS vectorCVSS:3.1/AV:N/AC:H/PR:H/UI:R/S:U/C:N/I:H/A:H

Description

Improper Link Resolution Before File Access (invoked by 1E‑Explorer‑TachyonCore‑DeleteFileByPath instruction) in TeamViewer DEX - 1E Client before version 26.1 on Windows allows a low‑privileged local attacker to delete protected system files via a crafted RPC control junction or symlink that is followed when the delete instruction executes.

Weakness classification

  • psirt@teamviewer.com: CWE-59

Primary references