Vulnerability Details CVE-2026-23563
Improper Link Resolution Before File Access (invoked by 1E‑Explorer‑TachyonCore‑DeleteFileByPath instruction) in TeamViewer DEX - 1E Client before version 26.1 on Windows allows a low‑privileged local attacker to delete protected system files via a crafted RPC control junction or symlink that is followed when the delete instruction executes.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.0
EPSS Ranking 15.1%
CVSS Severity
CVSS v3 Score 5.7
Products affected by CVE-2026-23563
-
cpe:2.3:a:teamviewer:digital_employee_experience:15.0
-
cpe:2.3:a:teamviewer:digital_employee_experience:17.1
-
cpe:2.3:a:teamviewer:digital_employee_experience:19.2
-
cpe:2.3:a:teamviewer:digital_employee_experience:21.0
-
cpe:2.3:a:teamviewer:digital_employee_experience:21.1
-
cpe:2.3:a:teamviewer:digital_employee_experience:25.0
-
cpe:2.3:a:teamviewer:digital_employee_experience:25.11
-
cpe:2.3:a:teamviewer:digital_employee_experience:3.4
-
cpe:2.3:o:microsoft:windows:-