{"id":"CVE-2026-2695","url":"https://www.cyber-defence.io/tools/cve/CVE-2026-2695","generatedAt":"2026-10-28T02:13:45.878Z","title":"A command injection vulnerability was discovered in TeamViewer DEX Platform On-Premises (former 1E DEX Platform On-Premises) prior to version 9.2.","description":"A command\ninjection vulnerability was discovered in TeamViewer DEX Platform On-Premises\n(former 1E DEX Platform On-Premises) prior to version 9.2. Improper input validation allows\nauthenticated users with at least questioner privileges to inject commands in specific\ninstructions. Exploitation could lead to execution of elevated commands on\ndevices connected to the platform.","published":"2026-05-13T17:16:19.000Z","lastModified":"2026-10-26T17:10:03.000Z","status":"Awaiting Analysis","sourceIdentifier":"psirt@teamviewer.com","cvss":{"version":"3.1","score":6.3,"severity":"MEDIUM","vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L"},"cwe":["CWE-20"],"affected":[],"epss":{"score":0.00201,"percentile":0.09876,"date":"2026-10-26","history":[]},"kev":{"listed":false},"exploits":{"count":0,"verified":false,"firstPublished":null,"source":"Exploit-DB (https://gitlab.com/exploit-database/exploitdb)","entries":[]},"verdict":{"level":"low","text":"Lower severity and a low EPSS score (0.20%). Track it; it rarely justifies an emergency change on its own."},"changes":[],"references":[{"url":"https://www.teamviewer.com/de/resources/trust-center/security-bulletins/tv-2026-1004/","source":"psirt@teamviewer.com"}],"sources":{"nvd":"https://nvd.nist.gov/vuln/detail/CVE-2026-2695","epss":"https://www.first.org/epss/","kev":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog","exploitdb":"https://www.exploit-db.com/"},"licence":"CC BY 4.0 — link back to the CVE Explorer if you publish the results; upstream data remains subject to its own terms."}