Strix
26.1K

CVE-2026-23571

MEDIUMCVSS 6.8/10EPSS 0.66%

Last modified

CVE-2026-23571 is a medium-severity vulnerability rated 6.8/10 on the CVSS scale. A command injection vulnerability was discovered in TeamViewer DEX (former 1E DEX), specifically within the 1E-Nomad-RunPkgStatusRequest instruction. Improper input validation allows authenticated attackers with actioner privilege to run elevated arbitrary commands on connected hosts via malicious commands injected into the instruction’s input field. Users of 1E Client version 24.5 or higher are not affected.. EPSS estimates a 0.66% chance of exploitation in the next 30 days.

Description

A command injection vulnerability was discovered in TeamViewer DEX (former 1E DEX), specifically within the 1E-Nomad-RunPkgStatusRequest instruction. Improper input validation allows authenticated attackers with actioner privilege to run elevated arbitrary commands on connected hosts via malicious commands injected into the instruction’s input field. Users of 1E Client version 24.5 or higher are not affected.

Metrics

CVSS 3.1
6.8/10

CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:U/C:H/I:H/A:H

EPSS Probability
0.66%

46.9th percentile

Probability of exploitation in the next 30 days. Learn more

Weakness Enumeration

Affected Software

VendorProductVersions
TeamviewerDigital Employee Experience< 26.1

References

Timeline

Published
Last Modified
Status
Analyzed

Frequently Asked Questions

What is CVE-2026-23571?
A command injection vulnerability was discovered in TeamViewer DEX (former 1E DEX), specifically within the 1E-Nomad-RunPkgStatusRequest instruction. Improper input validation allows authenticated attackers with actioner privilege to run elevated arbitrary commands on connected hosts via malicious commands injected into the instruction’s input field. Users of 1E Client version 24.5 or higher are not affected.
How severe is CVE-2026-23571?
CVE-2026-23571 has a CVSS score of 6.8/10 (MEDIUM severity). The EPSS model estimates a 0.66% probability of exploitation in the next 30 days.
How do I fix CVE-2026-23571?
Check the vendor references and advisories linked above for patched versions and mitigation guidance. You can also run a Strix scan to test if your systems are affected.

Are you affected by CVE-2026-23571?

Run a free Strix scan to check your systems for this vulnerability.

Scan your code now

Source: NVD / NIST