Approved changes feed: RSS · Atom

cpe:2.3:a:teamspeak_3_server:teamspeak_3_server:*:*:*:*:*:*:*:*

part: a version: * update: *

VendorTeamspeak 3 Server (49ea23bf-42b7-5594-9b27-e30cf7ececf2)
ProductTeamspeak 3 Server (56be282b-c61b-525a-b35a-73a320f3f4db)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*

Notes

Imported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2026-4392 vulnerable 2026-06-08 08:05:13.314200 TeamSpeak 3 Server clientek Handshake assertion
MEDIUM (5.3)
A vulnerability was detected in TeamSpeak 3 Server up to 3.13.7. This issue affects some unknown processing of the component clientek Handshake Handler. Performing a manipulation of the argument proof results in reachable assertion. Remote exploitation of the attack is possible. Upgrading to version 3.13.8 is capable of addressing this issue. Upgrading the affected component is recommended.
Published: 2026-05-27T17:00:09.695Z
Updated: 2026-05-28T15:04:08.513Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2026-4391 vulnerable 2026-06-08 08:05:13.313967 TeamSpeak 3 Server ECC Key heap-based overflow
MEDIUM (5.3)
A security vulnerability has been detected in TeamSpeak 3 Server up to 3.13.7. This vulnerability affects unknown code of the component ECC Key Parser. Such manipulation leads to heap-based buffer overflow. The attack may be launched remotely. Upgrading to version 3.13.8 is able to resolve this issue. It is suggested to upgrade the affected component.
Published: 2026-05-27T16:45:07.874Z
Updated: 2026-05-27T18:46:24.200Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2026-4390 vulnerable 2026-06-08 08:05:13.313586 TeamSpeak 3 Server Connection State Management process_resend_queue use after free
MEDIUM (5.4)
A weakness has been identified in TeamSpeak 3 Server up to 3.13.7. This affects the function process_resend_queue of the component Connection State Management. This manipulation causes use after free. The attack may be initiated remotely. Upgrading to version 3.13.8 is able to mitigate this issue. The affected component should be upgraded.
Published: 2026-05-27T16:30:08.778Z
Updated: 2026-05-27T17:58:41.828Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.

Inspect record JSON

Open JSON directly

Open this panel to browse, search, copy or download the JSON record.