CVE-2026-82987

Description

There exists a screen capture endpoint in vCast media streaming service in ViewSonic ViewBoard unknown allows a remote, unauthenticated attacker to capture and exfiltrate the current screen content via GET requests to an unauthenticated /snapshot or /screen endpoint returning JPEGs

Traduire en français

Produits concernés

• Viewsonic vCast

Références

• https://blog.l3afs.space/posts/Vcast-Viewsonic-RCE-chain/
• https://kb.cert.org/vuls/id/234131

Ailleurs

• NVD
• CVE.org
• CIRCL Vulnerability-Lookup
• CERT-FR
• GitHub Advisories