CVEvulnerability

CVE-2025-46266

6.5 MEDIUM Published 2025-12-11 Modified 2026-10-08 Official page ↗
Status
Analyzed
Published
2025-12-11
Last modified
2026-10-08
Assigner
[email protected]
CVSS 3.1 ([email protected])
4.3 MEDIUM — CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
CVSS 3.1 ([email protected])
6.5 MEDIUM — CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
Weaknesses
CWE-20

Description

A vulnerability in TeamViewer DEX Client (former 1E Client) - Content Distribution Service (NomadBranch.exe) prior version 25.11 for Windows allows malicious actors to coerce the service into transmitting data to an arbitrary internal IP address, potentially leaking sensitive information.

Affected configurations

• teamviewer digital employee experience (< 25.11)

Related

Weakness · CWE (1)

  • CWE-20 Improper Input Validation weakness

References