Assertion Vulnerability in TeamSpeak 3 Server by TeamSpeak Systems
CVE-2026-4392

6.9MEDIUM

Key Information:

Vendor

TeamSpeak Systems

Status
Teamspeak 3 Server
Vendor
CVE Published:
27 May 2026

What is CVE-2026-4392?

A vulnerability exists in TeamSpeak 3 Server versions up to 3.13.7, specifically in the processing of the clientek Handshake Handler component. An attacker can manipulate the proof argument, leading to an assertion that may be reached. This flaw opens the door for potential remote exploitation. To mitigate this risk, it is strongly advised to upgrade to TeamSpeak 3 Server version 3.13.8, which resolves this issue and enhances system security.

Affected Version(s)

TeamSpeak 3 Server 3.13.0

TeamSpeak 3 Server 3.13.1

TeamSpeak 3 Server 3.13.2

References

https://vuldb.com/vuln/366316
vdb-entrytechnical-description
https://vuldb.com/vuln/366316/cti
signaturepermissions-required
https://modzero.com/en/advisories/mz-26-01-teamspeak/
related

CVSS V4

Score:
6.9
Severity:
MEDIUM
Confidentiality:
None
Integrity:
None
Availability:
Low
Attack Vector:
Network
Attack Complexity:
Low
Attack Required:
None
Privileges Required:
Undefined
User Interaction:
None

Timeline

  • Vulnerability published

  • Vulnerability Reserved

Credit

Michael Imfeld (modzero)
.