CVE-2026-23570
Medium
Description
A missing validation of a user-controlled value in the TeamViewer DEX Client (former 1E Client) - Content Distribution Service (NomadBranch.exe) prior version 26.1 for Windows allows an adjacent network attacker to tamper with log timestamps via crafted UDP Sync command. This could result in forged or nonsensical datetime prefixes and compromising log integrity and forensic correlation.
SeverityMedium
CVSS6.5
Exploit probability—
Product
Teamviewer Digital Employee Experience
PublishedJan 29, 2026
First seenJan 29, 2026
Weakness typeCWE-20Improper input validation
How to fix
Update
- teamviewer digital_employee_experience26.1 or later
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| teamviewer digital_employee_experience | v < 26.1 | 26.1 |
Check your version
Choose the product and enter the version you run to see whether it falls in the affected range.
In the Intelligence 360 plan
Attack Surface Management
See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.