CVE-2026-23564

MEDIUM

TeamViewer DEX Client <26.1 - Info Disclosure

Title source: llm
STIX 2.1

Description

A vulnerability in TeamViewer DEX Client (former 1E Client) - Content Distribution Service (NomadBranch.exe) prior version 26.1 for Windows allows an attacker on the adjacent network to cause normally encrypted UDP traffic to be sent in cleartext. This can result in disclosure of sensitive information.

Scores

CVSS v3 6.5
EPSS 0.0001
EPSS Percentile 2.9%
Attack Vector ADJACENT_NETWORK
CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

CISA SSVC

Vulnrichment
Exploitation none
Automatable no
Technical Impact partial

Details

CWE
CWE-319
Status published
Products (1)
teamviewer/digital_employee_experience < 26.1
Published Jan 29, 2026
Tracked Since Feb 18, 2026