CVEvulnerability

CVE-2026-2695

6.3 MEDIUM Published 2026-05-13 Modified 2026-10-26 Official page ↗
Status
Awaiting Analysis
Published
2026-05-13
Last modified
2026-10-26
Assigner
[email protected]
CVSS 3.1 ([email protected])
6.3 MEDIUM — CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L
Weaknesses
CWE-20

Description

A command injection vulnerability was discovered in TeamViewer DEX Platform On-Premises (former 1E DEX Platform On-Premises) prior to version 9.2. Improper input validation allows authenticated users with at least questioner privileges to inject commands in specific instructions. Exploitation could lead to execution of elevated commands on devices connected to the platform.

Related

Weakness · CWE (1)

  • CWE-20 Improper Input Validation weakness

References