Skip to content

Commit 3268d2f

Browse files
advisory-database[bot]advisory-database[bot]
committed
Publish Advisories
GHSA-54qv-2399-4h2x GHSA-5c5v-ch87-qh4m GHSA-6hp2-gvhf-wmvw GHSA-82cg-rxq8-hc7m GHSA-84pp-fp9r-5535 GHSA-jffw-mmpf-fpx4 GHSA-wgvc-4m87-rq27 GHSA-wv29-cpcr-3fpf GHSA-x24c-w26v-w8jg GHSA-x6v8-wggp-5c32
1 parent 3763ac2 commit 3268d2f

10 files changed

Lines changed: 360 additions & 0 deletions

File tree

‎advisories/unreviewed/2026/01/GHSA-54qv-2399-4h2x/GHSA-54qv-2399-4h2x.json‎

Lines changed: 36 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,36 @@
1+
{
2+
"schema_version": "1.4.0",
3+
"id": "GHSA-54qv-2399-4h2x",
4+
"modified": "2026-01-29T09:31:50Z",
5+
"published": "2026-01-29T09:31:50Z",
6+
"aliases": [
7+
"CVE-2026-23571"
8+
],
9+
"details": "A command injection vulnerability was discovered in TeamViewer DEX (former 1E DEX), specifically within the 1E-Nomad-RunPkgStatusRequest instruction. Improper input validation allows authenticated attackers with actioner privilege to run elevated arbitrary commands on connected hosts via malicious commands injected into the instruction’s input field. Users of 1E Client version 24.5 or higher are not affected.",
10+
"severity": [
11+
{
12+
"type": "CVSS_V3",
13+
"score": "CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:U/C:H/I:H/A:H"
14+
}
15+
],
16+
"affected": [],
17+
"references": [
18+
{
19+
"type": "ADVISORY",
20+
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-23571"
21+
},
22+
{
23+
"type": "WEB",
24+
"url": "https://www.teamviewer.com/en/resources/trust-center/security-bulletins/tv-2026-1002"
25+
}
26+
],
27+
"database_specific": {
28+
"cwe_ids": [
29+
"CWE-20"
30+
],
31+
"severity": "MODERATE",
32+
"github_reviewed": false,
33+
"github_reviewed_at": null,
34+
"nvd_published_at": "2026-01-29T09:16:04Z"
35+
}
36+
}

‎advisories/unreviewed/2026/01/GHSA-5c5v-ch87-qh4m/GHSA-5c5v-ch87-qh4m.json‎

Lines changed: 36 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,36 @@
1+
{
2+
"schema_version": "1.4.0",
3+
"id": "GHSA-5c5v-ch87-qh4m",
4+
"modified": "2026-01-29T09:31:50Z",
5+
"published": "2026-01-29T09:31:50Z",
6+
"aliases": [
7+
"CVE-2026-23567"
8+
],
9+
"details": "An integer underflow in the UDP command handler of the TeamViewer DEX Client (former 1E Client) - Content Distribution Service (NomadBranch.exe) prior version 26.1 for Windows allows an adjacent network attacker to trigger a heap-based buffer overflow and cause a denial-of-service (service crash) via specially crafted UDP packets.",
10+
"severity": [
11+
{
12+
"type": "CVSS_V3",
13+
"score": "CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H"
14+
}
15+
],
16+
"affected": [],
17+
"references": [
18+
{
19+
"type": "ADVISORY",
20+
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-23567"
21+
},
22+
{
23+
"type": "WEB",
24+
"url": "https://www.teamviewer.com/en/resources/trust-center/security-bulletins/tv-2026-1001"
25+
}
26+
],
27+
"database_specific": {
28+
"cwe_ids": [
29+
"CWE-122"
30+
],
31+
"severity": "MODERATE",
32+
"github_reviewed": false,
33+
"github_reviewed_at": null,
34+
"nvd_published_at": "2026-01-29T09:16:04Z"
35+
}
36+
}

‎advisories/unreviewed/2026/01/GHSA-6hp2-gvhf-wmvw/GHSA-6hp2-gvhf-wmvw.json‎

Lines changed: 36 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,36 @@
1+
{
2+
"schema_version": "1.4.0",
3+
"id": "GHSA-6hp2-gvhf-wmvw",
4+
"modified": "2026-01-29T09:31:50Z",
5+
"published": "2026-01-29T09:31:50Z",
6+
"aliases": [
7+
"CVE-2026-23569"
8+
],
9+
"details": "An out-of-bounds read vulnerability in the TeamViewer DEX Client (former 1E Client) - Content Distribution Service (NomadBranch.exe) prior version 26.1 for Windows allows a remote attacker to leak stack memory and cause a denial of service via a crafted request. The leaked stack memory could be used to bypass ASLR remotely and facilitate exploitation of other vulnerabilities on the affected system.",
10+
"severity": [
11+
{
12+
"type": "CVSS_V3",
13+
"score": "CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H"
14+
}
15+
],
16+
"affected": [],
17+
"references": [
18+
{
19+
"type": "ADVISORY",
20+
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-23569"
21+
},
22+
{
23+
"type": "WEB",
24+
"url": "https://www.teamviewer.com/en/resources/trust-center/security-bulletins/tv-2026-1001"
25+
}
26+
],
27+
"database_specific": {
28+
"cwe_ids": [
29+
"CWE-125"
30+
],
31+
"severity": "MODERATE",
32+
"github_reviewed": false,
33+
"github_reviewed_at": null,
34+
"nvd_published_at": "2026-01-29T09:16:04Z"
35+
}
36+
}

‎advisories/unreviewed/2026/01/GHSA-82cg-rxq8-hc7m/GHSA-82cg-rxq8-hc7m.json‎

Lines changed: 36 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,36 @@
1+
{
2+
"schema_version": "1.4.0",
3+
"id": "GHSA-82cg-rxq8-hc7m",
4+
"modified": "2026-01-29T09:31:49Z",
5+
"published": "2026-01-29T09:31:49Z",
6+
"aliases": [
7+
"CVE-2026-23563"
8+
],
9+
"details": "Improper Link Resolution Before File Access (invoked by 1E‑Explorer‑TachyonCore‑DeleteFileByPath instruction) in TeamViewer DEX - 1E Client before version 26.1 on Windows allows a low‑privileged local attacker to delete protected system files via a crafted RPC control junction or symlink that is followed when the delete instruction executes.",
10+
"severity": [
11+
{
12+
"type": "CVSS_V3",
13+
"score": "CVSS:3.1/AV:N/AC:H/PR:H/UI:R/S:U/C:N/I:H/A:H"
14+
}
15+
],
16+
"affected": [],
17+
"references": [
18+
{
19+
"type": "ADVISORY",
20+
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-23563"
21+
},
22+
{
23+
"type": "WEB",
24+
"url": "https://www.teamviewer.com/en/resources/trust-center/security-bulletins/tv-2026-1002"
25+
}
26+
],
27+
"database_specific": {
28+
"cwe_ids": [
29+
"CWE-59"
30+
],
31+
"severity": "MODERATE",
32+
"github_reviewed": false,
33+
"github_reviewed_at": null,
34+
"nvd_published_at": "2026-01-29T09:16:03Z"
35+
}
36+
}

‎advisories/unreviewed/2026/01/GHSA-84pp-fp9r-5535/GHSA-84pp-fp9r-5535.json‎

Lines changed: 36 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,36 @@
1+
{
2+
"schema_version": "1.4.0",
3+
"id": "GHSA-84pp-fp9r-5535",
4+
"modified": "2026-01-29T09:31:50Z",
5+
"published": "2026-01-29T09:31:49Z",
6+
"aliases": [
7+
"CVE-2026-23564"
8+
],
9+
"details": "A vulnerability in TeamViewer DEX Client (former 1E Client) - Content Distribution Service (NomadBranch.exe) prior version 26.1 for Windows allows an attacker on the adjacent network to cause normally encrypted UDP traffic to be sent in cleartext. This can result in disclosure of sensitive information.",
10+
"severity": [
11+
{
12+
"type": "CVSS_V3",
13+
"score": "CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N"
14+
}
15+
],
16+
"affected": [],
17+
"references": [
18+
{
19+
"type": "ADVISORY",
20+
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-23564"
21+
},
22+
{
23+
"type": "WEB",
24+
"url": "https://www.teamviewer.com/en/resources/trust-center/security-bulletins/tv-2026-1001"
25+
}
26+
],
27+
"database_specific": {
28+
"cwe_ids": [
29+
"CWE-319"
30+
],
31+
"severity": "MODERATE",
32+
"github_reviewed": false,
33+
"github_reviewed_at": null,
34+
"nvd_published_at": "2026-01-29T09:16:03Z"
35+
}
36+
}

‎advisories/unreviewed/2026/01/GHSA-jffw-mmpf-fpx4/GHSA-jffw-mmpf-fpx4.json‎

Lines changed: 36 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,36 @@
1+
{
2+
"schema_version": "1.4.0",
3+
"id": "GHSA-jffw-mmpf-fpx4",
4+
"modified": "2026-01-29T09:31:50Z",
5+
"published": "2026-01-29T09:31:50Z",
6+
"aliases": [
7+
"CVE-2026-23568"
8+
],
9+
"details": "An out-of-bounds read vulnerability in the TeamViewer DEX Client (former 1E Client) - Content Distribution Service (NomadBranch.exe) prior version 26.1 for Windows allows an attacker on the adjacent network to cause information disclosure or denial-of-service via a special crafted packet. The leaked memory could be used to bypass ASLR and facilitate further exploitation.",
10+
"severity": [
11+
{
12+
"type": "CVSS_V3",
13+
"score": "CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:L"
14+
}
15+
],
16+
"affected": [],
17+
"references": [
18+
{
19+
"type": "ADVISORY",
20+
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-23568"
21+
},
22+
{
23+
"type": "WEB",
24+
"url": "https://www.teamviewer.com/en/resources/trust-center/security-bulletins/tv-2026-1001"
25+
}
26+
],
27+
"database_specific": {
28+
"cwe_ids": [
29+
"CWE-125"
30+
],
31+
"severity": "MODERATE",
32+
"github_reviewed": false,
33+
"github_reviewed_at": null,
34+
"nvd_published_at": "2026-01-29T09:16:04Z"
35+
}
36+
}

‎advisories/unreviewed/2026/01/GHSA-wgvc-4m87-rq27/GHSA-wgvc-4m87-rq27.json‎

Lines changed: 36 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,36 @@
1+
{
2+
"schema_version": "1.4.0",
3+
"id": "GHSA-wgvc-4m87-rq27",
4+
"modified": "2026-01-29T09:31:50Z",
5+
"published": "2026-01-29T09:31:50Z",
6+
"aliases": [
7+
"CVE-2026-23570"
8+
],
9+
"details": "A missing validation of a user-controlled value in the TeamViewer DEX Client (former 1E Client) - Content Distribution Service (NomadBranch.exe) prior version 26.1 for Windows allows an adjacent network attacker to tamper with log timestamps via crafted UDP Sync command. This could result in forged or nonsensical datetime prefixes and compromising log integrity and forensic correlation.",
10+
"severity": [
11+
{
12+
"type": "CVSS_V3",
13+
"score": "CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N"
14+
}
15+
],
16+
"affected": [],
17+
"references": [
18+
{
19+
"type": "ADVISORY",
20+
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-23570"
21+
},
22+
{
23+
"type": "WEB",
24+
"url": "https://www.teamviewer.com/en/resources/trust-center/security-bulletins/tv-2026-1001"
25+
}
26+
],
27+
"database_specific": {
28+
"cwe_ids": [
29+
"CWE-20"
30+
],
31+
"severity": "MODERATE",
32+
"github_reviewed": false,
33+
"github_reviewed_at": null,
34+
"nvd_published_at": "2026-01-29T09:16:04Z"
35+
}
36+
}

‎advisories/unreviewed/2026/01/GHSA-wv29-cpcr-3fpf/GHSA-wv29-cpcr-3fpf.json‎

Lines changed: 36 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,36 @@
1+
{
2+
"schema_version": "1.4.0",
3+
"id": "GHSA-wv29-cpcr-3fpf",
4+
"modified": "2026-01-29T09:31:50Z",
5+
"published": "2026-01-29T09:31:50Z",
6+
"aliases": [
7+
"CVE-2026-23566"
8+
],
9+
"details": "A vulnerability in TeamViewer DEX Client (former 1E Client) - Content Distribution Service (NomadBranch.exe) prior version 26.1 for Windows allows an attacker on the adjacent network to inject, tamper with, or forge log entries in \\Nomad Branch.log via crafted data sent to the UDP network handler. This can impact log integrity and nonrepudiation.",
10+
"severity": [
11+
{
12+
"type": "CVSS_V3",
13+
"score": "CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N"
14+
}
15+
],
16+
"affected": [],
17+
"references": [
18+
{
19+
"type": "ADVISORY",
20+
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-23566"
21+
},
22+
{
23+
"type": "WEB",
24+
"url": "https://www.teamviewer.com/en/resources/trust-center/security-bulletins/tv-2026-1001"
25+
}
26+
],
27+
"database_specific": {
28+
"cwe_ids": [
29+
"CWE-20"
30+
],
31+
"severity": "MODERATE",
32+
"github_reviewed": false,
33+
"github_reviewed_at": null,
34+
"nvd_published_at": "2026-01-29T09:16:04Z"
35+
}
36+
}

‎advisories/unreviewed/2026/01/GHSA-x24c-w26v-w8jg/GHSA-x24c-w26v-w8jg.json‎

Lines changed: 36 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,36 @@
1+
{
2+
"schema_version": "1.4.0",
3+
"id": "GHSA-x24c-w26v-w8jg",
4+
"modified": "2026-01-29T09:31:49Z",
5+
"published": "2026-01-29T09:31:49Z",
6+
"aliases": [
7+
"CVE-2026-1188"
8+
],
9+
"details": "In the Eclipse OMR port library component since release 0.2.0, an API function to return the textual names of all supported processor features was not accounting for the separator inserted between processor features. If the output buffer supplied to this function was incorrectly sized, failing to account for the separator when determining when a write to the buffer was safe could lead to a buffer overflow. This issue is fixed in Eclipse OMR version 0.8.0.",
10+
"severity": [
11+
{
12+
"type": "CVSS_V4",
13+
"score": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:L/VA:L/SC:L/SI:L/SA:L/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X"
14+
}
15+
],
16+
"affected": [],
17+
"references": [
18+
{
19+
"type": "ADVISORY",
20+
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-1188"
21+
},
22+
{
23+
"type": "WEB",
24+
"url": "https://github.com/eclipse-omr/omr/pull/8082"
25+
}
26+
],
27+
"database_specific": {
28+
"cwe_ids": [
29+
"CWE-131"
30+
],
31+
"severity": "MODERATE",
32+
"github_reviewed": false,
33+
"github_reviewed_at": null,
34+
"nvd_published_at": "2026-01-29T09:16:03Z"
35+
}
36+
}

‎advisories/unreviewed/2026/01/GHSA-x6v8-wggp-5c32/GHSA-x6v8-wggp-5c32.json‎

Lines changed: 36 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,36 @@
1+
{
2+
"schema_version": "1.4.0",
3+
"id": "GHSA-x6v8-wggp-5c32",
4+
"modified": "2026-01-29T09:31:50Z",
5+
"published": "2026-01-29T09:31:50Z",
6+
"aliases": [
7+
"CVE-2026-23565"
8+
],
9+
"details": "A vulnerability in TeamViewer DEX Client (former 1E Client) - Content Distribution Service (NomadBranch.exe) prior version 26.1 for Windows allows an attacker on the adjacent network to cause the NomadBranch.exe process to terminate via crafted requests. This can result in a denial-of-service condition of the Content Distribution Service.",
10+
"severity": [
11+
{
12+
"type": "CVSS_V3",
13+
"score": "CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H"
14+
}
15+
],
16+
"affected": [],
17+
"references": [
18+
{
19+
"type": "ADVISORY",
20+
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-23565"
21+
},
22+
{
23+
"type": "WEB",
24+
"url": "https://www.teamviewer.com/en/resources/trust-center/security-bulletins/tv-2026-1001"
25+
}
26+
],
27+
"database_specific": {
28+
"cwe_ids": [
29+
"CWE-476"
30+
],
31+
"severity": "MODERATE",
32+
"github_reviewed": false,
33+
"github_reviewed_at": null,
34+
"nvd_published_at": "2026-01-29T09:16:04Z"
35+
}
36+
}

0 commit comments

Comments
 (0)