CVE-2026-23566

Unknown Unknown - Not Provided

Log Injection Vulnerability in TeamViewer DEX Client UDP Handler

Publication date: 2026-01-29

Last updated on: 2026-02-11

Assigner: TeamViewer Germany GmbH

Description

A vulnerability in TeamViewer DEX Client (former 1E Client) - Content Distribution Service (NomadBranch.exe) prior version 26.1 for Windows allows an attacker on the adjacent network to inject, tamper with, or forge log entries in \Nomad Branch.log via crafted data sent to the UDP network handler. This can impact log integrity and nonrepudiation.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published

2026-01-29

Last Modified

2026-02-11

Generated

2026-07-06

AI Q&A

2026-01-29

EPSS Evaluated

2026-07-05

NVD

CVE-2026-23566

EUVD

EUVD-2026-4984

Affected Vendors & Products

Vendor	Product	Version / Range
teamviewer	digital_employee_experience	to 26.1 (exc)

Helpful Resources

Exploitability

CWE

KEV

CWE ID	Description
CWE-20	The product receives input or data, but it does not validate or incorrectly validates that the input has the properties that are required to process the data safely and correctly.

Attack-Flow Graph

Executive Summary

This vulnerability exists in TeamViewer DEX Client's Content Distribution Service (NomadBranch.exe) prior to version 26.1 for Windows. It allows an attacker on the adjacent network to inject, tamper with, or forge log entries in the Nomad Branch.log file by sending crafted data to the UDP network handler. This compromises the integrity of the logs and affects their reliability.

Impact Analysis

The vulnerability can impact you by allowing an attacker to alter or forge log entries, which undermines the integrity and trustworthiness of the logs. This can affect nonrepudiation, meaning it may be difficult to prove actions or events recorded in the logs, potentially hiding malicious activity or causing incorrect audit trails.

Compliance Impact

The vulnerability impacts log integrity and nonrepudiation by allowing an attacker to inject, tamper with, or forge log entries. This could potentially affect compliance with standards and regulations that require accurate and tamper-proof logging, such as GDPR and HIPAA, which mandate maintaining the integrity of audit logs for security and accountability purposes.

Hi! I’m here to help you understand CVE-2026-23566. Ask me anything about the vulnerability, its impact, or mitigation strategies.

0/70