VULNERABILITY INTELLIGENCE
CVE-2025-46266
CVSS score4.3 MEDIUM
EPSS probability0.20%
CISA KEVNot currently listed
Published2025-12-11
Last modified2026-10-08
CVSS vectorCVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
Description
A vulnerability in TeamViewer DEX Client (former 1E Client) - Content Distribution Service (NomadBranch.exe) prior version 25.11 for Windows allows malicious actors to coerce the service into transmitting data to an arbitrary internal IP address, potentially leaking sensitive information.
Weakness classification
- psirt@teamviewer.com: CWE-20
- nvd@nist.gov: NVD-CWE-noinfo
Primary references
- psirt@teamviewer.com — Vendor Advisory