PT-2026-5251 · Teamviewer · Teamviewer Dex Client

Published 2026-01-29 · Updated 2026-01-29 · CVE-2026-23564

Positive Technologies (AI Summary)

CVSS v3.1

6.5

Medium

Base vector

AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

Name of the Vulnerable Software and Affected Versions TeamViewer DEX Client versions prior to 26.1

Description A flaw exists in the TeamViewer DEX Client Content Distribution Service (NomadBranch.exe) that, for versions before 26.1, could allow an attacker on the local network to intercept normally encrypted UDP traffic, causing it to be sent in cleartext. This could lead to the disclosure of sensitive information.

Recommendations Update TeamViewer DEX Client to version 26.1 or later.

Fix

Cleartext Transmission of Sensitive Information

Weakness Enumeration

CWE-319

Related Identifiers

BDU:2026-01098

CVE-2026-23564

Affected Products

Teamviewer Dex Client

References · 8

• https://teamviewer.com/en/resources/trust-center/security-bulletins/tv-2026-1001 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2026-23564 · Security Note
• https://osv.dev/vulnerability/CVE-2026-23564 · Vendor Advisory
• https://bdu.fstec.ru/vul/2026-01098 · Security Note
• https://twitter.com/VulmonFeeds/status/2016824568866885965 · Twitter Post
• https://twitter.com/CVEnew/status/2016805044017058104 · Twitter Post
• https://t.me/CVEtracker/43220 · Telegram Post
• https://t.me/cveNotify/150243 · Telegram Post