Exploitation Summary
EIP tracks 1 public exploit for CVE-2026-4391. PoCs published by born0monday.
AI-analyzed exploit summary This repository contains functional exploit code for CVE-2026-4391, a pre-authentication denial-of-service vulnerability in TeamSpeak 3.13.7. The PoC implements a UDP-based attack that crashes the server during the handshake process by sending a crafted ECC public key.
Description
A security vulnerability has been detected in TeamSpeak 3 Server up to 3.13.7. This vulnerability affects unknown code of the component ECC Key Parser. Such manipulation leads to heap-based buffer overflow. The attack may be launched remotely. Upgrading to version 3.13.8 is able to resolve this issue. It is suggested to upgrade the affected component.
Exploits (1)
This repository contains functional exploit code for CVE-2026-4391, a pre-authentication denial-of-service vulnerability in TeamSpeak 3.13.7. The PoC implements a UDP-based attack that crashes the server during the handshake process by sending a crafted ECC public key.
References (5)
Scores
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L