CVE-2026-23564: Transmission of Unencrypted Data in Content Distribution Service

Q: What is the severity of CVE-2026-23564?

CVE-2026-23564 is considered a high-severity vulnerability due to the potential exposure of sensitive data.

Q: How do I fix CVE-2026-23564?

To fix CVE-2026-23564, upgrade the TeamViewer DEX Client to version 26.1 or later.

Q: What type of attack is possible with CVE-2026-23564?

CVE-2026-23564 allows an attacker on an adjacent network to intercept normally encrypted UDP traffic.

Q: Which software versions are affected by CVE-2026-23564?

CVE-2026-23564 affects the TeamViewer DEX Client prior to version 26.1.

Q: What component of TeamViewer DEX Client is vulnerable in CVE-2026-23564?

The vulnerable component in CVE-2026-23564 is the Content Distribution Service (NomadBranch.exe).

Published Jan 29, 2026

Updated

A vulnerability in TeamViewer DEX Client (former 1E Client) - Content Distribution Service (NomadBranch.exe) prior version 26.1 for Windows allows an attacker on the adjacent network to cause normally encrypted UDP traffic to be sent in cleartext. This can result in disclosure of sensitive information.

Affected Software

3 affected components

TeamViewer DEX Client<26.1

All of the following

TeamViewer Digital Employee Experience<26.1

Microsoft Windows

Remediation

Information

Update the TeamViewer DEX Client (1E Client) to the latest available version.

Event History

Jan 29, 2026

CVE Published

via MITRE·08:43 AM

Data Sourced

via MITRE·08:43 AM

RemedyDescriptionSeverityWeakness

Data Sourced

via NVD·09:16 AM

DescriptionSeverityWeaknessAffected Software

Frequently Asked Questions

What is the severity of CVE-2026-23564?

CVE-2026-23564 is considered a high-severity vulnerability due to the potential exposure of sensitive data.

How do I fix CVE-2026-23564?

To fix CVE-2026-23564, upgrade the TeamViewer DEX Client to version 26.1 or later.

What type of attack is possible with CVE-2026-23564?