Signal is active with 2 mentions in latest observed window
Recommended action window: Monitor and triage in normal cycle
NVD description
A command injection vulnerability was discovered in TeamViewer DEX (former 1E DEX), specifically within the 1E-Nomad-RunPkgStatusRequest instruction. Improper input validation allows authenticated attackers with actioner privilege to run elevated arbitrary commands on connected hosts via malicious commands injected into the instruction’s input field. Users of 1E Client version 24.5 or higher are not affected.
Priority
LOW
Exploitation
NONE
PoC
NONE
Patch
NONE
Momentum
NONE
If you run products in this scope, you should treat this CVE as relevant to your environment.
1 version affected across 2 products
CVE-2026-23571 Command Injection in TeamViewer DEX 1E-Nomad-RunPkgStatusRequest Instruction https://vulmon.com/vulnerabilitydetails?qid=CVE-2026-23571
Post summary
The text announces the discovery of CVE-2026-23571, describing it as a command injection flaw in a specific TeamViewer component, but does not provide any PoC, exploit code, active exploitation evidence, or patch details.
CVE-2026-23571 A command injection vulnerability was discovered in TeamViewer DEX (former 1E DEX), specifically within the 1E-Nomad-RunPkgStatusRequest instruction. Improper input v… https://www.cve.org/CVERecord?id=CVE-2026-23571
Post summary
The text announces a command injection vulnerability in TeamViewer DEX, providing some technical details but no PoC, exploit, or patch information.
2 of 2 entries
| Part | Vendor | Product | Version | Target SW | Target HW |
|---|---|---|---|---|---|
| OS | microsoft | windows | - | - | - |
| App | teamviewer | digital_employee_experience | - | - | - |