Skip to content
bugbounty.fyi
Get paid to secure open source 475 paid open-source programs on Sorona, up to $1M Perk Low bugs: $100 or 1 mo Claude Max

Also on Patchstack. All 476 paid open-source programs

Try

Highest paying Newly launched Paid without KYC Full safe harbor
All results

About this site

TeamViewer Germany GmbH bug bounty programs

teamviewer.com Updated

TeamViewer Germany GmbH runs one public program: a YesWeHack bug bounty paying up to €10,000.

Top reward
€10,000
YesWeHack
Programs
1
1 pays cash
Targets in scope
9
4 types
Last change
None yet
Tracked since Nov 2026

Where to report

The one public program TeamViewer Germany GmbH runs.

  • TeamViewer - Bounty Program

    YesWeHack · Bug bounty

    Open

    Top reward

    €10k
    Critical
    €10k
    High
    €4,000
    Medium
    €1,000
    Low
    €200
    Safe harbor
    Partial
    First response
    24 hours promised

Amounts are the top reward per severity in the currency each program pays. First response is the platform's measured average when it publishes one, else what the policy promises.

What is in scope

9 targets. 1 excluded.

  • https://account.teamviewer.com

    Web

  • https://login.teamviewer.com

    Web

  • https://web.teamviewer.com

    Web

  • https://play.google.com/store/apps/details?id=com.teamviewer.host.market&hl=en&gl=US

    Android

  • https://play.google.com/store/apps/details?id=com.teamviewer.quicksupport.market&hl=en&gl=US

    Android

  • https://play.google.com/store/apps/details?id=com.teamviewer.teamviewer.market.mobile&hl=en&gl=US

    Android

  • https://apps.apple.com/de/app/teamviewer-quicksupport/id661649585

    iOS

  • https://apps.apple.com/de/app/teamviewer-remote-control/id692035811

    iOS

  • https://www.teamviewer.com/en/products/teamviewer/

    Desktop and binaries

No target matches. Try part of a host name, such as the company name.

Out of scope 1

Don't test these. A program can exclude a host another program covers; the program you report to decides.

  • All domains not listed In-Scope

Recent changes

Reward and scope changes across every TeamViewer Germany GmbH program, newest first.

No changes recorded yet. New targets and reward moves show up here and in the RSS feed.

Recent CVEs

Published vulnerabilities in TeamViewer Germany GmbH products, from the NVD.

Search NVD
  • CVE-2026-23569 Medium

    An out-of-bounds read vulnerability in the TeamViewer DEX Client (former 1E Client) - Content Distribution Service (NomadBranch.exe) prior version 26.1 for Windows allows a remote attacker to leak stack memory and cause a denial of service via a crafted request. The leaked stack memory could be used to bypass ASLR remotely and facilitate exploitation of other vulnerabilities on the affected system

  • CVE-2026-23570 Medium

    A missing validation of a user-controlled value in the TeamViewer DEX Client (former 1E Client) - Content Distribution Service (NomadBranch.exe) prior version 26.1 for Windows allows an adjacent network attacker to tamper with log timestamps via crafted UDP Sync command. This could result in forged or nonsensical datetime prefixes and compromising log integrity and forensic correlation.

  • CVE-2026-23571 Medium

    A command injection vulnerability was discovered in TeamViewer DEX (former 1E DEX), specifically within the 1E-Nomad-RunPkgStatusRequest instruction. Improper input validation allows authenticated attackers with actioner privilege to run elevated arbitrary commands on connected hosts via malicious commands injected into the instruction’s input field. Users of 1E Client version 24.5 or higher are n

  • CVE-2026-23563 Medium

    Improper Link Resolution Before File Access (invoked by 1E‑Explorer‑TachyonCore‑DeleteFileByPath instruction) in TeamViewer DEX - 1E Client before version 26.1 on Windows allows a low‑privileged local attacker to delete protected system files via a crafted RPC control junction or symlink that is followed when the delete instruction executes.

  • CVE-2026-23564 Medium

    A vulnerability in TeamViewer DEX Client (former 1E Client) - Content Distribution Service (NomadBranch.exe) prior version 26.1 for Windows allows an attacker on the adjacent network to cause normally encrypted UDP traffic to be sent in cleartext. This can result in disclosure of sensitive information.

  • CVE-2026-23565 Medium

    A vulnerability in TeamViewer DEX Client (former 1E Client) - Content Distribution Service (NomadBranch.exe) prior version 26.1 for Windows allows an attacker on the adjacent network to cause the NomadBranch.exe process to terminate via crafted requests. This can result in a denial-of-service condition of the Content Distribution Service.

  • CVE-2026-23566 Medium

    A vulnerability in TeamViewer DEX Client (former 1E Client) - Content Distribution Service (NomadBranch.exe) prior version 26.1 for Windows allows an attacker on the adjacent network to inject, tamper with, or forge log entries in \Nomad Branch.log via crafted data sent to the UDP network handler. This can impact log integrity and nonrepudiation.

  • CVE-2026-23567 Medium

    An integer underflow in the UDP command handler of the TeamViewer DEX Client (former 1E Client) - Content Distribution Service (NomadBranch.exe) prior version 26.1 for Windows allows an adjacent network attacker to trigger a heap-based buffer overflow and cause a denial-of-service (service crash) via specially crafted UDP packets.

About this page

This page gathers every public program listed under teamviewer.com: platform programs, self-hosted policies and security.txt contacts. Each program's own policy decides what is in scope and what it pays; check it before you test.

Something wrong or missing? Report a correction.