CVE WatchOct 21, 2026

CVE-2026-82987

There exists a screen capture endpoint in vCast media streaming service in ViewSonic ViewBoard unknown allows a remote, unauthenticated atta

CVSS

—

No CVSS

EPSS

—

KEV

—

Exploit Today

—

0-100

Published: Oct 21, 2026 · Last modified: Oct 21, 2026

EPSS · 30d

Not enough EPSS history yet.

Technical description

There exists a screen capture endpoint in vCast media streaming service in ViewSonic ViewBoard unknown allows a remote, unauthenticated attacker to capture and exfiltrate the current screen content via GET requests to an unauthenticated /snapshot or /screen endpoint returning JPEGs

Official references

blog.l3afs.spacehttps://blog.l3afs.space/posts/Vcast-Viewsonic-RCE-chain/
kb.cert.orghttps://kb.cert.org/vuls/id/234131

Related CVEs

No related CVEs by CWE or product.