← Vulnerability feed

Vulnerability record · CVE-2026-23563 · published 29 January 2026

CVE-2026-23563: Teamviewer digital employee experience link following vulnerability

Teamviewer · Digital Employee Experience

Improper Link Resolution Before File Access (invoked by 1E‑Explorer‑TachyonCore‑DeleteFileByPath instruction) in TeamViewer DEX - 1E Client before version 26.1 on Windows allows a low‑privileged local attacker to delete protected system files via a crafted RPC control junction or symlink that is followed when the delete instruction executes.

7.1 CVSS 3.1 High EPSS 0.23% · top 87.8% CWE-59 · Link following
7.1CVSS 3.1 base score
0.23%EPSS exploitation probability, 30 days
NoNot in CISA KEV
1Affected product versions listed by NVD
1References
17 Jun 2026Last modified by NVD

Description

Improper Link Resolution Before File Access (invoked by 1E‑Explorer‑TachyonCore‑DeleteFileByPath instruction) in TeamViewer DEX - 1E Client before version 26.1 on Windows allows a low‑privileged local attacker to delete protected system files via a crafted RPC control junction or symlink that is followed when the delete instruction executes.

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:H

Affected products

1 vulnerable configurations from NVD's CPE data, grouped by vendor and product.

References

LinkTags
https://www.teamviewer.com/en/resources/trust-center/security-bulletins/tv-2026-1002/ Vendor Advisory

Track CVE-2026-23563 inside VULONE

Watch it alongside the ransomware crews, C2 infrastructure and forum chatter that reference it, query it through the API and pull it into your SIEM over TAXII.

Start free Open in platform

Related vulnerabilities

Same products first, then exploited flaws of the same weakness class.

8.8CVE-2025-44016Teamviewer digital employee experience improper input validation vulnerabilityA vulnerability in TeamViewer DEX Client (former 1E client) - Content Distribution Service (NomadBranch.exe) prior version 25.11 for Windows allows m…EPSS 0.30%8.1CVE-2026-23568Teamviewer digital employee experience out-of-bounds read vulnerabilityAn out-of-bounds read vulnerability in the TeamViewer DEX Client (former 1E Client) - Content Distribution Service (NomadBranch.exe) prior version 26…EPSS 0.21%7.5CVE-2026-23569Teamviewer digital employee experience out-of-bounds read vulnerabilityAn out-of-bounds read vulnerability in the TeamViewer DEX Client (former 1E Client) - Content Distribution Service (NomadBranch.exe) prior version 26…EPSS 0.37%7.2CVE-2025-64991Teamviewer digital employee experience improper input validation vulnerabilityA command injection vulnerability was discovered in TeamViewer DEX (former 1E DEX), specifically within the 1E-PatchInsights-Deploy instruction prior…EPSS 0.87%7.2CVE-2025-64992Teamviewer digital employee experience improper input validation vulnerabilityA command injection vulnerability was discovered in TeamViewer DEX (former 1E DEX), specifically within the 1E-Nomad-PauseNomadJobQueue instruction p…EPSS 0.87%7.2CVE-2025-64993Teamviewer digital employee experience improper input validation vulnerabilityA command injection vulnerability was discovered in TeamViewer DEX (former 1E DEX), specifically within the 1E-ConfigMgrConsoleExtensions instruction…EPSS 0.87%7.2CVE-2025-64986Teamviewer digital employee experience improper input validation vulnerabilityA command injection vulnerability was discovered in TeamViewer DEX (former 1E DEX), specifically within the 1E-Explorer-TachyonCore-DevicesListeningO…EPSS 1.2%7.2CVE-2025-64987Teamviewer digital employee experience improper input validation vulnerabilityA command injection vulnerability was discovered in TeamViewer DEX (former 1E DEX), specifically within the 1E-Explorer-TachyonCore-CheckSimpleIoC in…EPSS 1.2%

Source: NIST National Vulnerability Database (record CVE-2026-23563), CISA KEV, FIRST EPSS (scores of 2026-09-26). This page is refreshed as NVD updates the record.