CVE-2025-46266CWE-20

CVE-2025-46266

Medium · published December 11, 2025

CVSS v3.1
4.3
EPSS
0%
Percentile
9.8
In the wild
Unconfirmed
What it is

A vulnerability in TeamViewer DEX Client (former 1E Client) - Content Distribution Service (NomadBranch.exe) prior version 25.11 for Windows allows malicious actors to coerce the service into transmitting data to an arbitrary internal IP address, potentially leaking sensitive information.

The record
Technical detail
CVSS v3.1
4.3 · MEDIUM
Vector
CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
CVSS v4.0
Not supplied
EPSS
0.00204 · 9.8th percentile
Weakness
CWE-20 · Improper Input Validation
Published
2025-12-11T17:16Z
Affected products (1)
ProductVersionsFixed in
teamviewer/digital_employee_experience< 25.1125.11
References (1)
https://www.teamviewer.com/en/resources/trust-center/security-bulletins/tv-2025-1005/ · [email protected]
EPSS history
Timeline
  • 11 DEC 11:25Z
    Unauthenticated Transmission of Data in NomadBranch.exe
    cvelistv5