← Vulnerability feed

Vulnerability record · CVE-2025-64986 · published 11 December 2025

CVE-2025-64986: Teamviewer digital employee experience improper input validation vulnerability

Teamviewer · Digital Employee Experience

A command injection vulnerability was discovered in TeamViewer DEX (former 1E DEX), specifically within the 1E-Explorer-TachyonCore-DevicesListeningOnAPort instruction prior V21. Improper input validation, allowing authenticated attackers with Actioner privileges to inject arbitrary commands. Exploitation enables remote execution of elevated commands on devices connected to the platform.

7.2 CVSS 3.1 High EPSS 1.2% · top 33.3% CWE-20 · Improper input validationCWE-77 · Command injection
7.2CVSS 3.1 base score
1.2%EPSS exploitation probability, 30 days
NoNot in CISA KEV
1Affected product versions listed by NVD
1References
17 Jun 2026Last modified by NVD

Description

A command injection vulnerability was discovered in TeamViewer DEX (former 1E DEX), specifically within the 1E-Explorer-TachyonCore-DevicesListeningOnAPort instruction prior V21. Improper input validation, allowing authenticated attackers with Actioner privileges to inject arbitrary commands. Exploitation enables remote execution of elevated commands on devices connected to the platform.

CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H

Affected products

1 vulnerable configurations from NVD's CPE data, grouped by vendor and product.

References

LinkTags
https://www.teamviewer.com/en/resources/trust-center/security-bulletins/tv-2025-1006/ Vendor Advisory

Track CVE-2025-64986 inside VULONE

Watch it alongside the ransomware crews, C2 infrastructure and forum chatter that reference it, query it through the API and pull it into your SIEM over TAXII.

Start free Open in platform

Related vulnerabilities

Same products first, then exploited flaws of the same weakness class.

8.8CVE-2025-44016Teamviewer digital employee experience improper input validation vulnerabilityA vulnerability in TeamViewer DEX Client (former 1E client) - Content Distribution Service (NomadBranch.exe) prior version 25.11 for Windows allows m…EPSS 0.30%8.1CVE-2026-23568Teamviewer digital employee experience out-of-bounds read vulnerabilityAn out-of-bounds read vulnerability in the TeamViewer DEX Client (former 1E Client) - Content Distribution Service (NomadBranch.exe) prior version 26…EPSS 0.21%7.5CVE-2026-23569Teamviewer digital employee experience out-of-bounds read vulnerabilityAn out-of-bounds read vulnerability in the TeamViewer DEX Client (former 1E Client) - Content Distribution Service (NomadBranch.exe) prior version 26…EPSS 0.37%7.2CVE-2025-64991Teamviewer digital employee experience improper input validation vulnerabilityA command injection vulnerability was discovered in TeamViewer DEX (former 1E DEX), specifically within the 1E-PatchInsights-Deploy instruction prior…EPSS 0.87%7.2CVE-2025-64992Teamviewer digital employee experience improper input validation vulnerabilityA command injection vulnerability was discovered in TeamViewer DEX (former 1E DEX), specifically within the 1E-Nomad-PauseNomadJobQueue instruction p…EPSS 0.87%7.2CVE-2025-64993Teamviewer digital employee experience improper input validation vulnerabilityA command injection vulnerability was discovered in TeamViewer DEX (former 1E DEX), specifically within the 1E-ConfigMgrConsoleExtensions instruction…EPSS 0.87%7.2CVE-2025-64987Teamviewer digital employee experience improper input validation vulnerabilityA command injection vulnerability was discovered in TeamViewer DEX (former 1E DEX), specifically within the 1E-Explorer-TachyonCore-CheckSimpleIoC in…EPSS 1.2%7.2CVE-2025-64988Teamviewer digital employee experience improper input validation vulnerabilityA command injection vulnerability was discovered in TeamViewer DEX (former 1E DEX), specifically within the 1E-Nomad-GetCmContentLocations instructio…EPSS 1.2%

Source: NIST National Vulnerability Database (record CVE-2025-64986), CISA KEV, FIRST EPSS (scores of 2026-09-26). This page is refreshed as NVD updates the record.