Vulnerability · Published Jan 29, 2026 · Assigned by TV
CVE-2026-23570Log timestamp tampering vulnerability in Content Distribution Service
Medium 6.5
In plain English
A medium-severity improper input validation in DEX from TeamViewer. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 0.7% (higher than 52% of all known vulnerabilities).
Official description
A missing validation of a user-controlled value in the TeamViewer DEX Client (former 1E Client) - Content Distribution Service (NomadBranch.exe) prior version 26.1 for Windows allows an adjacent network attacker to tamper with log timestamps via crafted UDP Sync command. This could result in forged or nonsensical datetime prefixes and compromising log integrity and forensic correlation.
Affected products (as reported)
| Vendor | Product | Versions |
|---|---|---|
| TeamViewer | DEX | 0 – before 26.1 |
Weakness: CWE-20 · Vector: CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N