Unauthenticated Transmission of Data in NomadBranch.exe_CVE-2025-46266

4.3 / 10

MEDIUM

CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N

Description

A vulnerability in TeamViewer DEX Client (former 1E Client) - Content Distribution Service (NomadBranch.exe) prior version 25.11 for Windows allows malicious actors to coerce the service into transmitting data to an arbitrary internal IP address, potentially leaking sensitive information.

Basic Information

ID CVE-2025-46266

Source TV

Published Dec 11, 2025 at 11:25

Affected Product

Vendor TeamViewer

Product DEX

Affected Versions TeamViewer DEX 0

CWE Classification

CWE-20

References

www.teamviewer.com /en/resources/trust-center/security-bulletins/tv-2025-1005/

{
    "lastseen": "",
    "description": "A vulnerability in TeamViewer DEX Client (former 1E Client) - Content Distribution Service (NomadBranch.exe) prior version 25.11 for Windows allows malicious actors to coerce the service into transmitting data to an arbitrary internal IP address, potentially leaking sensitive information.",
    "published": "2025-12-11T11:25:11.980Z",
    "modified": "2025-12-11T11:25:11.980Z",
    "type": "cve",
    "title": "Unauthenticated Transmission of Data in NomadBranch.exe",
    "source": "TV",
    "references": "https://www.teamviewer.com/en/resources/trust-center/security-bulletins/tv-2025-1005/",
    "id": "CVE-2025-46266",
    "bulletinFamily": "",
    "cwe": [
        "CWE-20"
    ],
    "cvelist": null,
    "sourceData": "TeamViewer DEX 0",
    "sourceHref": "",
    "cvss": {
        "score": 4.3,
        "severity": "MEDIUM",
        "vector": "CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N",
        "version": "3.1"
    },
    "cvss2": [],
    "cvss3": {
        "version": "",
        "vectorString": "",
        "baseScore": 0,
        "baseSeverity": "",
        "attackVector": "",
        "attackComplexity": "",
        "privilegesRequired": "",
        "userInteraction": "",
        "scope": "",
        "confidentialityImpact": "",
        "integrityImpact": "",
        "availabilityImpact": "",
        "cvssV3": {
            "version": "",
            "vectorString": "",
            "baseScore": 0,
            "baseSeverity": "",
            "attackVector": "",
            "attackComplexity": "",
            "privilegesRequired": "",
            "userInteraction": "",
            "scope": "",
            "confidentialityImpact": "",
            "integrityImpact": "",
            "availabilityImpact": ""
        }
    },
    "href": "",
    "category_name": "CVE",
    "post_link": "",
    "product": "DEX",
    "version": "0",
    "vendor": "TeamViewer",
    "ai_description": "",
    "ai_severity": "",
    "ai_vendor": "",
    "ai_product": "",
    "ai_version": "",
    "ai_score": 0
}