CVE-2026-82989

26th percentile - higher than 26% of all known CVEs

There is an input injection vulnerability in vCast exposed network services in ViewSonic ViewBoard. A remote, unauthenticated attacker can inject arbitrary input into service endpoints via network-based HTTP requests to unauthenticated endpoints.

An attacker can manipulate network service behavior, potentially leading to unauthorized changes or disruption of the ViewBoard device, without any credentials.

Restrict access to unauthenticated service endpoints, e.g., via firewall or network segmentation, and enforce authentication for all sensitive endpoints.