CVE-2026-23566
Unknown Unknown - Not Provided
Log Injection Vulnerability in TeamViewer DEX Client UDP Handler

Publication date: 2026-01-29

Last updated on: 2026-02-11

Assigner: TeamViewer Germany GmbH

Description
A vulnerability in TeamViewer DEX Client (former 1E Client) - Content Distribution Service (NomadBranch.exe) prior version 26.1 for Windows allows an attacker on the adjacent network to inject, tamper with, or forge log entries in \Nomad Branch.log via crafted data sent to the UDP network handler. This can impact log integrity and nonrepudiation.
CVSS Scores
EPSS Scores
Probability:
Percentile:
Meta Information
Published
2026-01-29
Last Modified
2026-02-11
Generated
2026-06-16
AI Q&A
2026-01-29
EPSS Evaluated
2026-06-15
NVD
CVE-2026-23566
EUVD
EUVD-2026-4984
Affected Vendors & Products
Showing 1 associated CPE
Vendor Product Version / Range
teamviewer digital_employee_experience to 26.1 (exc)
Helpful Resources
Exploitability
CWE
CWE Icon
KEV
KEV Icon
CWE ID Description
CWE-20 The product receives input or data, but it does not validate or incorrectly validates that the input has the properties that are required to process the data safely and correctly.
Attack-Flow Graph
AI Quick Actions
Instant insights powered by AI
Executive Summary

This vulnerability exists in TeamViewer DEX Client's Content Distribution Service (NomadBranch.exe) prior to version 26.1 for Windows. It allows an attacker on the adjacent network to inject, tamper with, or forge log entries in the Nomad Branch.log file by sending crafted data to the UDP network handler. This compromises the integrity of the logs and affects their reliability.

Impact Analysis

The vulnerability can impact you by allowing an attacker to alter or forge log entries, which undermines the integrity and trustworthiness of the logs. This can affect nonrepudiation, meaning it may be difficult to prove actions or events recorded in the logs, potentially hiding malicious activity or causing incorrect audit trails.

Compliance Impact

The vulnerability impacts log integrity and nonrepudiation by allowing an attacker to inject, tamper with, or forge log entries. This could potentially affect compliance with standards and regulations that require accurate and tamper-proof logging, such as GDPR and HIPAA, which mandate maintaining the integrity of audit logs for security and accountability purposes.

Chat Assistant
Ask questions about this CVE
Hi! I’m here to help you understand CVE-2026-23566. Ask me anything about the vulnerability, its impact, or mitigation strategies.
0/70
EPSS Chart