Medium severity · published Dec 11, 2025
CVE-2025-46266
Unauthenticated Transmission of Data in NomadBranch.exe
6.5
CVSS
0.2%
EPSS
No
On KEV
Description
A vulnerability in TeamViewer DEX Client (former 1E Client) - Content Distribution Service (NomadBranch.exe) prior version 25.11 for Windows allows malicious actors to coerce the service into transmitting data to an arbitrary internal IP address, potentially leaking sensitive information.
CVSS vector
CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
Attack vector
Adjacent
Complexity
Low
Privileges
None
User interaction
None
Confidentiality
High
Integrity
None
Availability
None
Scope
Unchanged
Exploitation
Is it being used?
Exploit prediction (EPSS)0.2% · higher than 10% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
DE
DEX · TeamViewer
before 25.11.0.29 · source: vendor
DE
Digital Employee Experience · Teamviewer
before 25.11 · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2025-46266
CVE.org
https://www.cve.org/CVERecord?id=CVE-2025-46266
Vendor Advisory
https://www.teamviewer.com/en/resources/trust-center/security-bulletins/tv-2025-1005/
More from DEX
8.8
CVE-2025-44016
File Hash Validation Bypass in NomadBranch.exe
8.1
CVE-2026-23568
Out-of-bounds read vulnerability in Content Distribution Service
7.5
CVE-2026-23569
Out-of-bounds read vulnerability in Content Distribution Service
7.2
CVE-2025-64993
Command Injection in 1E-ConfigMgrConsoleExtensions Instructions
7.2
CVE-2025-64992
Command Injection in 1E-Nomad-PauseNomadJobQueue Instruction