12 matches found
EUVD-2026-92873
There is an input injection in vCast exposed network services in ViewSonic ViewBoard that allows a remote, unauthenticated attacker to inject arbitrary input into service endpoints via network-based HTTP requests to unauthenticated endpoints...
EUVD-2026-92874
There exists an arbitrary file download in vCast APK delivery mechanism in ViewSonic ViewBoard unknown allows a remote, unauthenticated attacker to trigger unprivileged APK installation via serving a malicious APK URL through an unauthenticated download endpoint...
CVE-2026-82989
There is an input injection in vCast exposed network services in ViewSonic ViewBoard that allows a remote, unauthenticated attacker to inject arbitrary input into service endpoints via network-based HTTP requests to unauthenticated endpoints...
CVE-2026-82988
There exists an arbitrary file download in vCast APK delivery mechanism in ViewSonic ViewBoard unknown allows a remote, unauthenticated attacker to trigger unprivileged APK installation via serving a malicious APK URL through an unauthenticated download endpoint...
CVE-2026-82988
The ViewSonic ViewBoard smartboard, which runs on an Android-based system, is vulnerable to CVE-2026-82988 due to a flaw in the vCast APK delivery mechanism. An unauthenticated remote attacker can trigger the installation of an unprivileged malicious package by providing a crafted URL to an unaut...
CVE-2026-82988 CVE-2026-82988
There exists an arbitrary file download in vCast APK delivery mechanism in ViewSonic ViewBoard unknown allows a remote, unauthenticated attacker to trigger unprivileged APK installation via serving a malicious APK URL through an unauthenticated download endpoint...
CVE-2026-82989
The ViewSonic ViewBoard smartboard (Android-based) is vulnerable to a variety of issues within the vCast proprietary software suite. Specifically, CVE-2026-82989 involves an input injection vulnerability where a remote, unauthenticated attacker can inject arbitrary input into service endpoints vi...
CVE-2026-82989 CVE-2026-82989
There is an input injection in vCast exposed network services in ViewSonic ViewBoard that allows a remote, unauthenticated attacker to inject arbitrary input into service endpoints via network-based HTTP requests to unauthenticated endpoints...
PT-2026-98305
Three critical unauthenticated CVEs in ViewSonic vCast CVE-2026-82987, CVE-2026-82988, CVE-2026-82989 allow a remote attacker to chain screen exfiltration with arbitrary APK installation for full device compromise. These are Android-based ViewBoard smartboards, heavily deployed in enterprise and...
ViewSonic vCast media streaming service allows unauthenticated screen exfiltration and device compromise
Overview ViewSonic vCast software, which is included in ViewBoard smartboard devices, contains multiple vulnerabilities that an attacker can chained to achieve full device compromise. Description ViewSonic ViewBoards are widely used smart display devices smartboard, typically deoloyed in enterpri...
PT-2026-98306
There exists an arbitrary file download in vCast APK delivery mechanism in ViewSonic ViewBoard unknown allows a remote, unauthenticated attacker to trigger unprivileged APK installation via serving a malicious APK URL through an unauthenticated download endpoint...
PT-2026-98307
There is an input injection in vCast exposed network services in ViewSonic ViewBoard that allows a remote, unauthenticated attacker to inject arbitrary input into service endpoints via network-based HTTP requests to unauthenticated endpoints...