CVE-2026-23570CWE-20

Log timestamp tampering vulnerability in Content Distribution Service

Medium · published January 29, 2026

CVSS v3.1
6.5
EPSS
1%
Percentile
50.9
In the wild
Unconfirmed
What it is

A missing validation of a user-controlled value in the TeamViewer DEX Client (former 1E Client) - Content Distribution Service (NomadBranch.exe) prior version 26.1 for Windows allows an adjacent network attacker to tamper with log timestamps via crafted UDP Sync command. This could result in forged or nonsensical datetime prefixes and compromising log integrity and forensic correlation.

The record
Technical detail
CVSS v3.1
6.5 · MEDIUM
Vector
CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N
CVSS v4.0
Not supplied
EPSS
0.00658 · 50.9th percentile
Weakness
CWE-20 · Improper Input Validation
Published
2026-01-29T08:50Z
EPSS history
Timeline
  • 29 JAN 08:50Z
    Log timestamp tampering vulnerability in Content Distribution Service
    cvelistv5