CVE-2025-46266

A vulnerability in TeamViewer DEX Client (former 1E Client) - Content Distribution Service (NomadBranch.exe) prior version 25.11 for Windows allows malicious actors to coerce the service into transmitting data to an arbitrary internal IP address, potentially leaking sensitive information.

Score

CVSS 3.1 6.5 Medium

Status

Analyzed - psirt@teamviewer.com

Published

2025-12-11

Last modified

2026-10-08

Weaknesses

CWE-20

Affected products

• Dex (Teamviewer)
• Digital Employee Experience (Teamviewer)

References

• https://www.teamviewer.com/en/resources/trust-center/security-bulletins/tv-2025-1005/