Critical ViewSonic vCast Vulnerabilities Allow Attackers to Gain Full Control Over the Device
Unauthenticated ViewSonic vCast flaws can expose screens and install apps on ViewBoards.
CERT/CC Vulnerability Note VU#234131, published September 24, 2026, describes three unauthenticated flaws in ViewSonic vCast: CVE-2026-82989, CVE-2026-82988, and CVE-2026-82987. An attacker on the same network can retrieve JPEG screen snapshots, supply a malicious APK for installation, and inject input into exposed services, chaining them to control Android ViewBoard displays. ViewSonic’s vendor status was unknown, and CERT/CC recommends isolating the devices until firmware fixes are released.
- CVE-2026-82989 lets unauthenticated clients capture display snapshots.
- CVE-2026-82988 can download and install a supplied APK without login.
- CVE-2026-82987 allows arbitrary input injection into vCast endpoints.
- CERT/CC could not reach ViewSonic and no patch was available.
- Vendors
- ViewSonic
- Organizations
- CERT Coordination Center
Vulnerabilities mentioned
All| CVE | Vulnerability | CVSS | EPSS | Signals | Published |
|---|---|---|---|---|---|
| CVE-2026-82987 | There exists a screen capture endpoint in vCast media streaming service in ViewSonic ViewBoard unknown allows a remote, unauthenticated attacker to capture and… | 7.5 | — | ||
CVE-2026-82989+1 related CVE | Unauthenticated input injection in ViewSonic ViewBoard vCast | 9.8 group max | — |
From the original article
2 min read at cybersecuritynews.com
Critical vulnerabilities in ViewSonic’s vCast software could allow attackers on the same network to steal screen content, install malicious Android applications, and potentially gain full control of affected ViewBoard smart displays. The issues were disclosed in CERT Coordination Center Vulnerability Note VU#234131, published on September 24, 2026.
By Abinaya · cybersecuritynews.com
A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.