Skip to content
CVE PROGRAM SOURCE RECORD5.7 Medium

CVE-2026-23563

Privilege escalation in TeamViewer DEX via DeleteFileByPath instruction

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
TV

Description

Improper Link Resolution Before File Access (invoked by 1E‑Explorer‑TachyonCore‑DeleteFileByPath instruction) in TeamViewer DEX - 1E Client before version 26.1 on Windows allows a low‑privileged local attacker to delete protected system files via a crafted RPC control junction or symlink that is followed when the delete instruction executes.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

TeamViewer DEX

Default version status: unaffected

  • 0 to < 26.1affected

References