CVE-2026-24346CWE-798

Use of well-known default credentials in EZCast Pro II Dongle

High · published January 27, 2026

CVSS v4.0
7.6
EPSS
0%
Percentile
16.4
In the wild
Unconfirmed
What it is

🚨 Default credentials are still lurking in the shadows! The Admin UI of EZCast Pro II version 1.17478.146 allows anyone to access sensitive areas with the easiest passwords imaginable. 🔥 Think of this like leaving the front door of your house wide open with a neon sign saying "Welcome!" to intruders. It’s an invitation for anyone to wander in without any resistance whatsoever! An attacker could stroll right into the Admin UI and gain unauthorized access to sensitive data, configuration settings, and even user accounts. This could lead to data breaches or the alteration of important settings, making it an absolute nightmare for your security posture.

Put simply

Think of this like leaving the front door of your house wide open with a neon sign saying "Welcome!" to intruders. It’s an invitation for anyone to wander in without any resistance whatsoever! This vulnerability arises from the use of well-known default credentials in the Admin UI, allowing attackers to bypass authentication and access protected areas of the web application without any barriers.

What to do

An attacker could stroll right into the Admin UI and gain unauthorized access to sensitive data, configuration settings, and even user accounts. This could lead to data breaches or the alteration of important settings, making it an absolute nightmare for your security posture. It's crucial to change the default credentials immediately and implement strong password policies. Additionally, consider restricting access to the Admin UI based on IP addresses or implementing multi-factor authentication. You've got this! Follow these steps and you'll keep your system safe and sound! 🛡️

The record
Technical detail
CVSS v4.0
7.6 · HIGH
Vector
CVSS:4.0/AV:A/AC:H/AT:N/PR:N/UI:N/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N/AU:N/R:U
EPSS
0.00256 · 16.4th percentile
Weakness
CWE-798 · Use of Hard-coded Credentials
Published
2026-01-27T09:18Z
EPSS history
Timeline
  • 27 JAN 09:18Z
    Use of well-known default credentials in EZCast Pro II Dongle
    cvelistv5