CVE-2026-82987
Low risk· EPSS 20%Exploitation Probability (EPSS)
Low risk20th percentile - higher than 20% of all known CVEs
Summary
A screen capture endpoint in the vCast media streaming service in ViewSonic ViewBoard allows a remote, unauthenticated attacker to capture and exfiltrate the current screen content. GET requests to unauthenticated /snapshot or /screen endpoints return JPEGs.
Risk Assessment
An unauthenticated attacker can exfiltrate the device's screen content, potentially revealing confidential information displayed on the board.
Recommendation
Restrict network access to /snapshot and /screen endpoints and update ViewBoard software to a patched version; consider disabling vCast if unused.
Other vulnerabilities in ViewSonic ViewBoard
See all- CVE-2026-82989Critical
There is an input injection vulnerability in vCast exposed network services in ViewSonic ViewBoard. A remote, unauthenticated attacker can inject arbitrary input into service endpoints via network-based HTTP requests to unauthenticated endpoints.
- CVE-2026-82988High
There is an arbitrary file download vulnerability in the vCast APK delivery mechanism in ViewSonic ViewBoard. A remote, unauthenticated attacker can trigger unprivileged APK installation by serving a malicious APK URL through an unauthenticated download endpoint.
Original NVD description (English source)
There exists a screen capture endpoint in vCast media streaming service in ViewSonic ViewBoard unknown allows a remote, unauthenticated attacker to capture and exfiltrate the current screen content via GET requests to an unauthenticated /snapshot or /screen endpoint returning JPEGs
Vulnerability data from NVD (NIST) · CISA KEV · EPSS