CVE-2026-23570
Unknown Unknown - Not Provided

Improper Validation in TeamViewer NomadBranch.exe Allows Log Forgery

Publication date: 2026-01-29

Last updated on: 2026-02-11

Assigner: TeamViewer Germany GmbH

Description
A missing validation of a user-controlled value in the TeamViewer DEX Client (former 1E Client) - Content Distribution Service (NomadBranch.exe) prior version 26.1 for Windows allows an adjacent network attacker to tamper with log timestamps via crafted UDP Sync command. This could result in forged or nonsensical datetime prefixes and compromising log integrity and forensic correlation.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published
2026-01-29
Last Modified
2026-02-11
Generated
2026-07-07
AI Q&A
2026-01-29
EPSS Evaluated
2026-07-05
NVD
CVE-2026-23570
EUVD
EUVD-2026-4994

Affected Vendors & Products

Showing 1 associated CPE
Vendor Product Version / Range
teamviewer digital_employee_experience to 26.1 (exc)

Helpful Resources

Exploitability

CWE
CWE Icon
KEV
KEV Icon
CWE ID Description
CWE-20 The product receives input or data, but it does not validate or incorrectly validates that the input has the properties that are required to process the data safely and correctly.

Attack-Flow Graph

AI Quick Actions

Instant insights powered by AI
Executive Summary

This vulnerability is due to a missing validation of a user-controlled value in the TeamViewer DEX Client's Content Distribution Service (NomadBranch.exe) before version 26.1 for Windows. An attacker on an adjacent network can exploit this by sending a crafted UDP Sync command to tamper with log timestamps, causing forged or nonsensical datetime prefixes in the logs.

Impact Analysis

The vulnerability can impact you by compromising the integrity of log files. An attacker can manipulate log timestamps, which may lead to incorrect or misleading log data, affecting forensic investigations and the ability to accurately correlate events.

Compliance Impact

The vulnerability allows tampering with log timestamps, which compromises log integrity and forensic correlation. This could negatively impact compliance with standards and regulations such as GDPR and HIPAA that require accurate and reliable logging for audit and forensic purposes.

Chat Assistant

Ask questions about this CVE
Hi! I’m here to help you understand CVE-2026-23570. Ask me anything about the vulnerability, its impact, or mitigation strategies.
0/70

EPSS Chart