CVE Feed

    Dashboard / CVE / CVE-2026-8381

    CVE-2026-8381

    A broken access control vulnerability exists in the TeamViewer DEX Platform (On‑Premises) prior version 9.2. Certain backend API endpoints do not correctly enforce authorization checks, allowing an authenticated user with low privileges to perform actions and access resources intended only for higher‑privileged roles. An attacker with low‑privileged credentials may exploit this to gain unauthorized access to administrative or sensitive functionality.

    Published:May 22, 2026
    Last Modified:May 22, 2026
    EPS:May 22, 2026
    EPSS Score:0.0003
    CVSS Score:5.4

    Affected Products

    Vendor
    Teamviewer
    Product
    Dex

    Exploits

    No exploit reference

    Common Weakness Enumeration

    CWE-862 Missing Authorization

    Common Attack Pattern Enumeration and Classification (CAPEC)

    CAPEC-665 Exploitation of Thunderbolt Protection Flaws

    Related CVEs

    CVE-2026-2695 (CVSS 6.3) — A command injection vulnerability was discovered in TeamViewer DEX Platform On-Premises (former 1E DEX Platfor…
    CVE-2026-23570 (CVSS 6.5) — A missing validation of a user-controlled value in the TeamViewer DEX Client (former 1E Client) - Content Dist…
    CVE-2026-23569 (CVSS 6.5) — An out-of-bounds read vulnerability in the TeamViewer DEX Client (former 1E Client) - Content Distribution Ser…
    CVE-2026-23568 (CVSS 5.4) — An out-of-bounds read vulnerability in the TeamViewer DEX Client (former 1E Client) - Content Distribution Ser…
    CVE-2026-23567 (CVSS 6.5) — An integer underflow in the UDP command handler of the TeamViewer DEX Client (former 1E Client) - Content Dist…
    CVE-2026-23566 (CVSS 6.5) — A vulnerability in TeamViewer DEX Client (former 1E Client) - Content Distribution Service (NomadBranch.exe) p…
    CVE-2026-23565 (CVSS 6.5) — A vulnerability in TeamViewer DEX Client (former 1E Client) - Content Distribution Service (NomadBranch.exe) p…
    CVE-2026-23564 (CVSS 6.5) — A vulnerability in TeamViewer DEX Client (former 1E Client) - Content Distribution Service (NomadBranch.exe) p…
    CVE-2026-23571 (CVSS 6.8) — A command injection vulnerability was discovered in TeamViewer DEX (former 1E DEX), specifically within the 1E…
    CVE-2026-23563 (CVSS 5.7) — Improper Link Resolution Before File Access (invoked by 1E‑Explorer‑TachyonCore‑DeleteFileByPath instruction) …

    Common Vulnerability Scoring System

    Attack Vector
    Network
    Adjacent
    Local
    Physical
    Privileges Required
    None
    Low
    High
    User Interaction
    None
    Required
    Scope
    Unchanged
    Changed
    Confidentiality
    None
    Low
    High
    Integrity
    None
    Low
    High
    Availability
    None
    Low
    High