Critical ViewSonic vCast Vulnerabilities Allow Attackers to Gain Full Control Over the Device
Unauthenticated ViewSonic vCast flaws can expose screens and install apps on ViewBoards.
70
CVE-2026-82987
- CVSS 3.1
- 7.5 high
- EPSS
- —
- Published
- ·
- Modified
Description · NVD
There exists a screen capture endpoint in vCast media streaming service in ViewSonic ViewBoard unknown allows a remote, unauthenticated attacker to capture and exfiltrate the current screen content via GET requests to an unauthenticated /snapshot or /screen endpoint returning JPEGs
- Weakness
- CWE-306
- Vector
- CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
In the news
3 storiesVU#234131: ViewSonic vCast media streaming service allows unauthenticated screen exfiltration and device compromise
Unauthenticated ViewSonic vCast flaws can leak screens and fully compromise ViewBoard devices.
68
ViewSonic vCast Vulnerabilities Let Attackers Gain Full Device Control Without Authentication
CERT/CC warns unauthenticated ViewSonic vCast flaws can capture screens, install apps, and fully control ViewBoards.
62