CVE-2026-2695CWE-20

Lack of Server-side validation in Instruction Input in TeamViewer DEX Platform (On-Premises)

Medium · published May 13, 2026

CVSS v3.1
6.3
EPSS
0%
Percentile
26.2
In the wild
Unconfirmed
What it is

A command

injection vulnerability was discovered in TeamViewer DEX Platform On-Premises

(former 1E DEX Platform On-Premises) prior to version 9.2. Improper input validation allows

authenticated users with at least questioner privileges to inject commands in specific

instructions. Exploitation could lead to execution of elevated commands on

devices connected to the platform.

The record
Technical detail
CVSS v3.1
6.3 · MEDIUM
Vector
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L
CVSS v4.0
Not supplied
EPSS
0.00340 · 26.2th percentile
Weakness
CWE-20 · Improper Input Validation
Published
2026-05-13T16:09Z
EPSS history
Timeline
  • 13 MAY 16:09Z
    Lack of Server-side validation in Instruction Input in TeamViewer DEX Platform (On-Premises)
    cvelistv5