CVE-2026-23566

Log Injection in Content Distribution Service UDP Handler

CVSS 6.5 MEDIUMEPSS 0.2%CWE-20

Vexday Risk Score

13Baixo

Decisão SSVC (CISA)

Track

Sem sinal de exploração → monitorar

CVSS 6.5EPSS 0.2%KEV nãoPoC —Nuclei —Metasploit —Patch —

Ciclo de vida

29 jan 2026Publicada no NVD

Recomendação: Monitorar — sem sinal de exploração no momento.

A vulnerability in TeamViewer DEX Client (former 1E Client) - Content Distribution Service (NomadBranch.exe) prior version 26.1 for Windows allows an attacker on the adjacent network to inject, tamper with, or forge log entries in \Nomad Branch.log via crafted data sent to the UDP network handler. This can impact log integrity and nonrepudiation.

CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N

Produtos afetados

TeamViewer · DEX

Quer saber se a sua infraestrutura está exposta a isto?

Falar com a TrueHacking →

Referências

https://www.teamviewer.com/en/resources/trust-center/security-bulletins/tv-2026-1001/