Vulnerability · Published Jan 29, 2026 · Assigned by TV
CVE-2026-23564Transmission of Unencrypted Data in Content Distribution Service
Medium 6.5
In plain English
A medium-severity security flaw in DEX from TeamViewer. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 0.1% (higher than 3% of all known vulnerabilities).
Severity (CVSS 3.1)6.5Medium
Exploit odds (30 days)0.1%top 97.4% of all CVEs
Exploited in the wildNo reportsCISA SSVC: none
Attack toolingNoneno public tooling known
Official description
A vulnerability in TeamViewer DEX Client (former 1E Client) - Content Distribution Service (NomadBranch.exe) prior version 26.1 for Windows allows an attacker on the adjacent network to cause normally encrypted UDP traffic to be sent in cleartext. This can result in disclosure of sensitive information.
Affected products (as reported)
| Vendor | Product | Versions |
|---|---|---|
| TeamViewer | DEX | 0 – before 26.1 |
Weakness: CWE-319 · Vector: CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N