CVE-2026-23563

Medium

Description

Improper Link Resolution Before File Access (invoked by 1E‑Explorer‑TachyonCore‑DeleteFileByPath instruction) in TeamViewer DEX - 1E Client before version 26.1 on Windows allows a low‑privileged local attacker to delete protected system files via a crafted RPC control junction or symlink that is followed when the delete instruction executes.

SeverityMedium
CVSS5.7
Exploit probability—
ProductTeamviewer Digital Employee Experience
PublishedJan 29, 2026
First seenJan 29, 2026

How to fix

Update
  • teamviewer digital_employee_experience26.1 or later

Affected products

ProductAffected versionsFixed in
teamviewer digital_employee_experiencev < 26.126.1

Check your version

Choose the product and enter the version you run to see whether it falls in the affected range.

In the Intelligence 360 plan

Attack Surface Management

See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.

CVE-2026-23563 · Teamviewer Digital Employee Experience · Dark Radar