Vulnerability · Published May 27, 2026 · Assigned by VulDB
CVE-2026-4392TeamSpeak 3 Server clientek Handshake assertion
Medium 5.3
In plain English
A medium-severity security flaw in TeamSpeak 3 Server. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 0.4% (higher than 35% of all known vulnerabilities).
Official description
A vulnerability was detected in TeamSpeak 3 Server up to 3.13.7. This issue affects some unknown processing of the component clientek Handshake Handler. Performing a manipulation of the argument proof results in reachable assertion. Remote exploitation of the attack is possible. Upgrading to version 3.13.8 is capable of addressing this issue. Upgrading the affected component is recommended.
Affected products (as reported)
| Vendor | Product | Versions |
|---|---|---|
| n/a | TeamSpeak 3 Server | 3.13.03.13.13.13.23.13.33.13.43.13.53.13.63.13.7 |
Weakness: CWE-617 · Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L/E:X/RL:O/RC:C
References
- VDB-366316 | TeamSpeak 3 Server clientek Handshake assertion vdb-entry, technical-description
- VDB-366316 | CTI Indicators (IOB, IOC, IOA) signature, permissions-required
- https://modzero.com/en/advisories/mz-26-01-teamspeak/ related
- https://files.teamspeak-services.com/docs/security/TS-SA-2026-001.html related
- https://www.teamspeak.com/en/downloads/#server patch