Product:
TeamViewer DEX Client
Summary
A vulnerability in TeamViewer DEX Client – Content Distribution Service (NomadBranch.exe) prior version 26.1 for Windows allows an attacker on the adjacent network to cause normally encrypted UDP traffic to be sent in cleartext. This can result in disclosure of sensitive information.
Details
| Severity | Base Score | CVE |
|---|---|---|
| MEDIUM | 6.5 | CVE-2026-23564 |
Exploitation
An attacker on the adjacent network can exploit this vulnerability by intercepting the UDP traffic that is normally encrypted. By sending specially crafted packets, the attacker can force the application to transmit sensitive information in cleartext, making it accessible to unauthorized users.
Affected Products
- TeamViewer DEX Client – Vulnerable versions prior to 26.1 for Windows
Mitigation
To mitigate this vulnerability, users should upgrade to the latest version of TeamViewer DEX Client. Additionally, network segmentation and proper firewall configurations can help limit exposure to adjacent network attacks.