CVE-2026-23570: medium-severity vulnerability in TeamViewer DEX
Log timestamp tampering vulnerability in Content Distribution Service
Published
E-mail alert when it lands in KEV, gets a public PoC or its score goes up.
13Vexday Risk Score
No sign of exploitation. No public exploitation artifact known so far.
ssvc Trackcvss 6.5epss 0.7%
A missing validation of a user-controlled value in the TeamViewer DEX Client (former 1E Client) - Content Distribution Service (NomadBranch.exe) prior version 26.1 for Windows allows an adjacent network attacker to tamper with log timestamps via crafted UDP Sync command. This could result in forged or nonsensical datetime prefixes and compromising log integrity and forensic correlation.
CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N
Affected products
TeamViewer · DEXRelated CVEs — TeamViewer DEX
In the same product, most dangerous first.
CVE-2025-64986HIGHCommand Injection in 1E-Explorer-TachyonCore-DevicesListeningOnAPort InstructionEPSS 1.2%CVE-2025-64988HIGHCommand Injection in 1E-Nomad-GetCmContentLocations InstructionEPSS 1.1%CVE-2025-64987HIGHCommand Injection in 1E-Explorer-TachyonCore-CheckSimpleIoC InstructionEPSS 1.1%CVE-2025-64989HIGHCommand Injection in 1E-Explorer-TachyonCore-FindFileBySizeAndHash InstructionEPSS 1.1%CVE-2025-64993MEDIUMCommand Injection in 1E-ConfigMgrConsoleExtensions InstructionsEPSS 0.9%CVE-2025-64992MEDIUMCommand Injection in 1E-Nomad-PauseNomadJobQueue InstructionEPSS 0.9%