VULNERABILITY INTELLIGENCE

CVE-2026-23570

CVSS score6.5 MEDIUM
EPSS probability0.67%
CISA KEVNot currently listed
Published2026-01-29
Last modified2026-06-17
CVSS vectorCVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N

Description

A missing validation of a user-controlled value in the TeamViewer DEX Client (former 1E Client) - Content Distribution Service (NomadBranch.exe) prior version 26.1 for Windows allows an adjacent network attacker to tamper with log timestamps via crafted UDP Sync command. This could result in forged or nonsensical datetime prefixes and compromising log integrity and forensic correlation.

Weakness classification

  • psirt@teamviewer.com: CWE-20

Primary references