PT-2026-44051 · Teamspeak · Teamspeak 3 Server

Michael Imfeld · Published 2026-05-27 · Updated 2026-05-27 · CVE-2026-4391

Positive Technologies (AI Summary)

CVSS v3.1

5.3

Medium

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L

Name of the Vulnerable Software and Affected Versions TeamSpeak 3 Server versions prior to 3.13.8

Description A heap-based buffer overflow exists in the ECC Key Parser component. This issue allows a remote attacker to cause a memory corruption by manipulating the parser, which handles Elliptic Curve Cryptography (ECC) keys used for secure communication.

Recommendations Update to version 3.13.8.

Fix

Heap Based Buffer Overflow

Buffer Overflow

Weakness Enumeration

CWE-122

CWE-119

Related Identifiers

CVE-2026-4391

Affected Products

Teamspeak 3 Server

References · 8

• https://nvd.nist.gov/vuln/detail/CVE-2026-4391 · Security Note
• https://teamspeak.com/en/downloads/#server · Patch
• https://files.teamspeak-services.com/docs/security/TS-SA-2026-001.html · Note
• https://twitter.com/infoflowcloud/status/2059719182577443025 · Twitter Post
• https://vuldb.com/vuln/366315 · Note
• https://modzero.com/en/advisories/mz-26-01-teamspeak · Note
• https://twitter.com/CVEnew/status/2059718148509905188 · Twitter Post
• https://vuldb.com/vuln/366315/cti · Note