CVE-2026-23563 Privilege escalation in TeamViewer DEX via DeleteFileByPath instruction

Improper Link Resolution Before File Access invoked by 1E‑Explorer‑TachyonCore‑DeleteFileByPath instruction in TeamViewer DEX - 1E Client before version 26.1 on Windows allows a low‑privileged local attacker to delete protected system files via a crafted RPC control junction or symlink that is...

CVE-2026-23563

CVE-2026-23563 affects TeamViewer DEX - 1E Client for Windows prior to 26.1. The issue arises from DeleteFileByPath handling, where improper Link Resolution Before File Access can allow a low-privileged local attacker to delete protected system files via a crafted RPC control junction or symlink ...