Veille CVE

Octobre 2026

3 CVE

Critique 1 Élevée 1 Moyenne 0 Faible 0 Non évaluée 1 Exploitées (KEV) Tri : plus récentes « Viewsonic vCast » ✕
  1. CVE-2026-82987 – Non évaluée

    Viewsonic vCast

    There exists a screen capture endpoint in vCast media streaming service in ViewSonic ViewBoard unknown allows a remote, unauthenticated attacker to capture and exfiltrate the current screen content via GET requests to an unauthenticated /snapshot or /screen endpoint returning JPEGs

  2. CVE-2026-82989 9.8 Critique

    Viewsonic vCast

    There is an input injection in vCast exposed network services in ViewSonic ViewBoard that allows a remote, unauthenticated attacker to inject arbitrary input into service endpoints via network-based HTTP requests to unauthenticated endpoints

  3. CVE-2026-82988 7.5 Élevée

    Viewsonic vCast

    There exists an arbitrary file download in vCast APK delivery mechanism in ViewSonic ViewBoard unknown allows a remote, unauthenticated attacker to trigger unprivileged APK installation via serving a malicious APK URL through an unauthenticated download endpoint