CVE-2026-23563Disclosure(microsoft / digital_employee_experience)

LOWCVSS 7.1 · HIGH

Signal is active with 2 mentions in latest observed window

Immediate actions

  • Track advisory updates for patch or workaround availability

Recommended action window: Monitor and triage in normal cycle

NVD description

Improper Link Resolution Before File Access (invoked by 1E‑Explorer‑TachyonCore‑DeleteFileByPath instruction) in TeamViewer DEX - 1E Client before version 26.1 on Windows allows a low‑privileged local attacker to delete protected system files via a crafted RPC control junction or symlink that is followed when the delete instruction executes.

0.5/ 10 priority

Sources & remediation

Weakness type (CWE)
CWE-59

Priority

LOW

Exploitation

NONE

PoC

NONE

Patch

NONE

Momentum

NONE

Are you affected?

If you run products in this scope, you should treat this CVE as relevant to your environment.

  • digital_employee_experience
  • windows

Threat summary

  • 2 mentions across 1 observed day

What's happening

  • Technical details provided in 2 signals
  • Disclosure: 2 classified signals
  • 2 total mentions across 1 day

Affected systems

Products
digital_employee_experiencewindows

1 version affected across 2 products

Deep dive

Activity timeline2 mentions / 1d
01122Mentions · 2026-01-29: 2Technical Details · 2026-01-29: 201-29
Signal classification1 categories
Disclosure
2100.0%
Referenced assets2 URLs
Full discourse2 posts
  • Vulmon Vulnerability Feed@VulmonFeeds
    Disclosure

    CVE-2026-23563 TeamViewer DEX 1E Client Windows Privilege Escalation via Symlink Manipulation https://vulmon.com/vulnerabilitydetails?qid=CVE-2026-23563

    Post summary

    The text announces a Windows privilege‑escalation flaw in TeamViewer DEX 1E Client caused by symlink manipulation, but provides no evidence of exploitation, patches, or PoC details.

    0010090
    4.0K followersView on X
  • CVE@CVEnew
    Disclosure

    CVE-2026-23563 Improper Link Resolution Before File Access (invoked by 1E‑Explorer‑TachyonCore‑DeleteFileByPath instruction) in TeamViewer DEX - 1E Client before version 26.1 on Win… https://www.cve.org/CVERecord?id=CVE-2026-23563

    Post summary

    A new vulnerability, CVE‑2026‑23563, is disclosed describing improper link resolution before file access in TeamViewer DEX – 1E Client prior to version 26.1 on Windows.

    00000255
    56.5K followersView on X
CPE platform detail2 entries

2 of 2 entries

PartVendorProductVersionTarget SWTarget HW
OSmicrosoftwindows---
Appteamviewerdigital_employee_experience---

Explore more