CVE-2026-2695
Medium
Description
A command injection vulnerability was discovered in TeamViewer DEX Platform On-Premises (former 1E DEX Platform On-Premises) prior to version 9.2. Improper input validation allows authenticated users with at least questioner privileges to inject commands in specific instructions. Exploitation could lead to execution of elevated commands on devices connected to the platform.
SeverityMedium
CVSS6.3
Exploit probability10. percentile0.2%
Product
DEX (On-Premises)
PublishedMay 13, 2026
First seenMay 13, 2026
Weakness typeCWE-20Improper input validation
How to fix
Update
- TeamViewer DEX (On-Premises)9.2 or later
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| TeamViewer DEX (On-Premises) | v < 9.2 | 9.2 |
Check your version
Choose the product and enter the version you run to see whether it falls in the affected range.
In the Intelligence 360 plan
Attack Surface Management
See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.