CVE-2026-4391: TeamSpeak 3 Server ECC Key heap-based overflow

Severity: medium (CVSS 5.3 v3.1)
Exploited in the wild: not listed in CISA KEV
EPSS: 0.4% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2026-05-27 · updated 2026-06-17
Weakness: CWE-119

Description

A security vulnerability has been detected in TeamSpeak 3 Server up to 3.13.7. This vulnerability affects unknown code of the component ECC Key Parser. Such manipulation leads to heap-based buffer overflow. The attack may be launched remotely. Upgrading to version 3.13.8 is able to resolve this issue. It is suggested to upgrade the affected component.

Affected products

TeamSpeak 3 Server: 3.13.0, 3.13.1, 3.13.2, 3.13.3, 3.13.4, 3.13.5 (+2)

References

https://files.teamspeak-services.com/docs/security/TS-SA-2026-001.html
https://modzero.com/en/advisories/mz-26-01-teamspeak/
https://vuldb.com/vuln/366315
https://vuldb.com/vuln/366315/cti
https://www.teamspeak.com/en/downloads/#server

Get alerted when CVE-2026-4391 or the next vulnerability affects your stack