CVE-2026-23566CWE-20

Log Injection in Content Distribution Service UDP Handler

Medium · published January 29, 2026

CVSS v3.1
6.5
EPSS
0%
Percentile
4.7
In the wild
Unconfirmed
What it is

A vulnerability in TeamViewer DEX Client (former 1E Client) - Content Distribution Service (NomadBranch.exe) prior version 26.1 for Windows allows an attacker on the adjacent network to inject, tamper with, or forge log entries in \Nomad Branch.log via crafted data sent to the UDP network handler. This can impact log integrity and nonrepudiation.

The record
Technical detail
CVSS v3.1
6.5 · MEDIUM
Vector
CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N
CVSS v4.0
Not supplied
EPSS
0.00159 · 4.7th percentile
Weakness
CWE-20 · Improper Input Validation
Published
2026-01-29T08:46Z
EPSS history
Timeline
  • 29 JAN 08:46Z
    Log Injection in Content Distribution Service UDP Handler
    cvelistv5