CVE-2026-4392

TeamSpeak 3 Server clientek Handshake assertion

State: Published
Severity: 6.9 Medium
Published: May 27, 2026
Updated: May 28, 2026
Reserved: Mar 18, 2026

Description

A vulnerability was detected in TeamSpeak 3 Server up to 3.13.7. This issue affects some unknown processing of the component clientek Handshake Handler. Performing a manipulation of the argument proof results in reachable assertion. Remote exploitation of the attack is possible. Upgrading to version 3.13.8 is capable of addressing this issue. Upgrading the affected component is recommended.

Scores

CVSS	Score	Vector	Source
4.0	6.9 Medium	CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N/E:X	VulDB
3.1	5.3 Medium	CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L/E:X/RL:O/RC:C	VulDB
3.0	5.3 Medium	CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L/E:X/RL:O/RC:C	VulDB
2.0	5.0 Medium	AV:N/AC:L/Au:N/C:N/I:N/A:P/E:ND/RL:OF/RC:C	VulDB

Weaknesses

CWE-617 Reachable Assertion

Affected Products

Product	Versions
TeamSpeak 3 Servern/a	3.13.0Affected 3.13.1Affected 3.13.2Affected 3.13.3Affected 3.13.4Affected 3.13.5Affected 3.13.6Affected 3.13.7Affected 3.13.8Not affected

References

VDB-366316 | TeamSpeak 3 Server clientek Handshake assertionvdb-entrytechnical-description
VDB-366316 | CTI Indicators (IOB, IOC, IOA)signaturepermissions-required
https://modzero.com/en/advisories/mz-26-01-teamspeak/related
https://files.teamspeak-services.com/docs/security/TS-SA-2026-001.htmlrelated
https://www.teamspeak.com/en/downloads/#serverpatch

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.