CVE-2026-4390 MEDIUM

CVE-2026-4390: TeamSpeak 3 Server Connection State Management process_resend_queue use after free

Vendor N/A
Product TeamSpeak 3 Server
Weakness CWE-416
Published May 27, 2026
Last update May 27, 2026
View on NVD All CVEs

CVSS base score

5.3/10
Attack vector Network
Attack complexity Low
Privileges required Low
User interaction None
Confidentiality —
Integrity —

CVSS vector

CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:N/VI:L/VA:L/SC:N/SI:N/SA:N/E:X

What the vulnerability does

01Description

A weakness has been identified in TeamSpeak 3 Server up to 3.13.7. This affects the function process_resend_queue of the component Connection State Management. This manipulation causes use after free. The attack may be initiated remotely. Upgrading to version 3.13.8 is able to mitigate this issue. The affected component should be upgraded.

Key dates

02Disclosure timeline

May 27, 2026 CVE published
May 27, 2026 Record updated