Product:
TeamViewer DEX Client
Summary
A vulnerability in TeamViewer DEX Client – Content Distribution Service (NomadBranch.exe) prior version 26.1 for Windows allows an attacker on the adjacent network to inject, tamper with, or forge log entries in Nomad Branch.log via crafted data sent to the UDP network handler. This can impact log integrity and nonrepudiation.
Details
| Severity | Base Score | CVE |
|---|---|---|
| MEDIUM | 6.5 | CVE-2026-23566 |
Exploitation
An attacker on the adjacent network can exploit this vulnerability by sending specially crafted data to the UDP network handler of the TeamViewer DEX Client. This crafted data can manipulate the log entries in Nomad Branch.log, allowing the attacker to inject, tamper with, or forge logs, which compromises the integrity of the logging system.
Affected Products
- TeamViewer DEX Client – Vulnerable prior version 26.1 for Windows, allowing log manipulation via UDP network handler.
Mitigation
To mitigate this vulnerability, users should upgrade to the latest version of TeamViewer DEX Client. Additionally, network segmentation and monitoring can help prevent unauthorized access to the adjacent network.