CVE-2026-23564

A vulnerability in TeamViewer DEX Client (former 1E Client) - Content Distribution Service (NomadBranch.exe) prior version 26.1 for Windows allows an attacker on the adjacent network to cause normally encrypted UDP traffic to be sent in cleartext. This can result in disclosure of sensitive information.

CVSS v3 6.5 MEDIUM

6.5^/10

CVSS v3 : MEDIUM

Vector :

Exploitability : 2.8 / Impact : 3.6

Attack Vector ADJACENT_NETWORK

Attack Complexity LOW

Privileges Required NONE

User Interaction NONE

Confidentiality Impact HIGH

Integrity Impact NONE

Availability Impact NONE

Scope UNCHANGED

References

Link	Resource
https://www.teamviewer.com/en/resources/trust-center/security-bulletins/tv-2026-1001/	Vendor Advisory

Configurations

Configuration 1 (hide)

AND

cpe:2.3:a:teamviewer:digital_employee_experience:*:*:*:*:*:*:*:*

cpe:2.3:o:microsoft:windows:-:*:*:*:*:*:*:*

History

17 Jun 2026, 10:21

Type	Values Removed	Values Added
Summary		(es) Una vulnerabilidad en TeamViewer DEX Client (anteriormente 1E Client) - Servicio de Distribución de Contenido (NomadBranch.exe) anterior a la versión 26.1 para Windows permite a un atacante en la red adyacente provocar que el tráfico UDP normalmente cifrado se envíe en texto claro. Esto puede resultar en la divulgación de información sensible.

11 Feb 2026, 19:24

Type	Values Removed	Values Added
CPE		cpe:2.3:o:microsoft:windows:-:::::::* cpe:2.3:a:teamviewer:digital_employee_experience::::::::
First Time		Teamviewer digital Employee Experience Teamviewer Microsoft Microsoft windows
References	~~() https://www.teamviewer.com/en/resources/trust-center/security-bulletins/tv-2026-1001/ -~~	() https://www.teamviewer.com/en/resources/trust-center/security-bulletins/tv-2026-1001/ - Vendor Advisory

29 Jan 2026, 09:16

Type	Values Removed	Values Added
New CVE

Information

Published : 2026-01-29 09:16

Updated : 2026-06-17 10:21

NVD link : CVE-2026-23564

Mitre link : CVE-2026-23564

CVE.ORG link : CVE-2026-23564

JSON object : View

Products Affected

microsoft

windows

teamviewer

digital_employee_experience

CWE

CWE-319

Cleartext Transmission of Sensitive Information

{"id": "CVE-2026-23564", "cveTags": [], "metrics": {"ssvcV203": [{"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "ssvcData": {"id": "CVE-2026-23564", "role": "CISA Coordinator", "options": [{"exploitation": "none"}, {"automatable": "no"}, {"technicalImpact": "partial"}], "version": "2.0.3", "timestamp": "2026-01-29T15:57:06.915459Z"}}], "cvssMetricV31": [{"type": "Secondary", "source": "psirt@teamviewer.com", "cvssData": {"scope": "UNCHANGED", "version": "3.1", "baseScore": 6.5, "attackVector": "ADJACENT_NETWORK", "baseSeverity": "MEDIUM", "vectorString": "CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N", "integrityImpact": "NONE", "userInteraction": "NONE", "attackComplexity": "LOW", "availabilityImpact": "NONE", "privilegesRequired": "NONE", "confidentialityImpact": "HIGH"}, "impactScore": 3.6, "exploitabilityScore": 2.8}]}, "affected": [{"source": "psirt@teamviewer.com", "affectedData": [{"vendor": "TeamViewer", "modules": ["Content Distribution Service", "NomadBranch.exe"], "product": "DEX", "versions": [{"status": "affected", "version": "0", "lessThan": "26.1", "versionType": "custom"}], "platforms": ["Windows"], "defaultStatus": "unaffected"}]}], "published": "2026-01-29T09:16:03.950", "references": [{"url": "https://www.teamviewer.com/en/resources/trust-center/security-bulletins/tv-2026-1001/", "tags": ["Vendor Advisory"], "source": "psirt@teamviewer.com"}], "vulnStatus": "Analyzed", "weaknesses": [{"type": "Secondary", "source": "psirt@teamviewer.com", "description": [{"lang": "en", "value": "CWE-319"}]}], "descriptions": [{"lang": "en", "value": "A vulnerability in TeamViewer DEX Client (former 1E Client) - Content Distribution Service (NomadBranch.exe) prior version 26.1 for Windows allows an attacker on the adjacent network to cause normally encrypted UDP traffic to be sent in cleartext. This can result in disclosure of sensitive information."}, {"lang": "es", "value": "Una vulnerabilidad en TeamViewer DEX Client (anteriormente 1E Client) - Servicio de Distribuci\u00f3n de Contenido (NomadBranch.exe) anterior a la versi\u00f3n 26.1 para Windows permite a un atacante en la red adyacente provocar que el tr\u00e1fico UDP normalmente cifrado se env\u00ede en texto claro. Esto puede resultar en la divulgaci\u00f3n de informaci\u00f3n sensible."}], "lastModified": "2026-06-17T10:21:47.010", "configurations": [{"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:a:teamviewer:digital_employee_experience:*:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "8E2A5CE4-D147-45E1-8D16-3257B6E79E70", "versionEndExcluding": "26.1"}], "operator": "OR"}, {"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:o:microsoft:windows:-:*:*:*:*:*:*:*", "vulnerable": false, "matchCriteriaId": "A2572D17-1DE6-457B-99CC-64AFD54487EA"}], "operator": "OR"}], "operator": "AND"}], "sourceIdentifier": "psirt@teamviewer.com"}