CVE Watch21 oct 2026

CVE-2026-82987

There exists a screen capture endpoint in vCast media streaming service in ViewSonic ViewBoard unknown allows a remote, unauthenticated atta

CVSS

—

Sin CVSS

EPSS

—

KEV

—

Exploit Today

—

0-100

Publicado: 21 oct 2026 · Última mod.: 21 oct 2026

EPSS · 30d

Sin historial EPSS suficiente todavía.

Descripción técnica

There exists a screen capture endpoint in vCast media streaming service in ViewSonic ViewBoard unknown allows a remote, unauthenticated attacker to capture and exfiltrate the current screen content via GET requests to an unauthenticated /snapshot or /screen endpoint returning JPEGs

Referencias oficiales

blog.l3afs.spacehttps://blog.l3afs.space/posts/Vcast-Viewsonic-RCE-chain/
kb.cert.orghttps://kb.cert.org/vuls/id/234131

CVEs relacionados

Sin CVEs relacionados por CWE o producto.