CVE-2026-82987: vCast v0.0.0 through v3.2.715

Affected technology

vCast · v0.0.0 through v3.2.715
Viewsonic

Component: Not specified by the source

What an attacker can do

A remote, unauthenticated attacker can capture and exfiltrate the current screen content via GET requests to an unauthenticated /snapshot or /screen endpoint returning JPEGs.

Published 22-Oct-2026 01:10 UTC

KEV: no

Provenance

GitHub Advisory Database · Source record · observed 2026-10-22 02:21:33.599910+00:00 UTC
NVD CVE API 2.0 · Source record · observed 2026-10-22 01:08:24.561609+00:00 UTC

Stable permalink: https://cybercodered.org/item/cve-cve-2026-82987.html