CVEvulnerability
CVE-2026-82987
- Status
- Deferred
- Published
- 2026-10-21
- Last modified
- 2026-10-22
- Assigner
- [email protected]
Description
There exists a screen capture endpoint in vCast media streaming service in ViewSonic ViewBoard unknown allows a remote, unauthenticated attacker to capture and exfiltrate the current screen content via GET requests to an unauthenticated /snapshot or /screen endpoint returning JPEGs
References
- https://blog.l3afs.space/posts/Vcast-Viewsonic-RCE-chain/ blog.l3afs.space
- https://kb.cert.org/vuls/id/234131 kb.cert.org