CVE-2026-23566: Log Injection in Content Distribution Service UDP Handler

Q: What is the severity of CVE-2026-23566?

CVE-2026-23566 has been classified as a medium severity vulnerability.

Q: How do I fix CVE-2026-23566?

To fix CVE-2026-23566, update to the latest version of TeamViewer DEX Client that is above version 26.1.

Q: Who is affected by CVE-2026-23566?

CVE-2026-23566 affects users of TeamViewer DEX Client versions prior to 26.1.

Q: What type of vulnerability is CVE-2026-23566?

CVE-2026-23566 is a log injection vulnerability in the Content Distribution Service UDP Handler.

Q: Can an attacker exploit CVE-2026-23566 remotely?

No, an attacker must be on the adjacent network to exploit CVE-2026-23566.

Published Jan 29, 2026

Updated

A vulnerability in TeamViewer DEX Client (former 1E Client) - Content Distribution Service (NomadBranch.exe) prior version 26.1 for Windows allows an attacker on the adjacent network to inject, tamper with, or forge log entries in \Nomad Branch.log via crafted data sent to the UDP network handler. This can impact log integrity and nonrepudiation.

Affected Software

3 affected components

TeamViewer DEX Client<26.1

All of the following

TeamViewer Digital Employee Experience<26.1

Microsoft Windows

Remediation

Information

Update the TeamViewer DEX Client (1E Client) to the latest available version.

Event History

Jan 29, 2026

CVE Published

via MITRE·08:46 AM

Data Sourced

via MITRE·08:46 AM

RemedyDescriptionSeverityWeakness

Data Sourced

via NVD·09:16 AM

DescriptionSeverityWeaknessAffected Software

Jun 19, 58090

Event

via FIRST·05:24 PM

Frequently Asked Questions

What is the severity of CVE-2026-23566?

CVE-2026-23566 has been classified as a medium severity vulnerability.

How do I fix CVE-2026-23566?

To fix CVE-2026-23566, update to the latest version of TeamViewer DEX Client that is above version 26.1.

Who is affected by CVE-2026-23566?