CVE-2026-82987

CVE-2026-82987

published October 22, 2026

CVSS
—
EPSS
0%
Percentile
20.1
In the wild
Unconfirmed
What it is

There exists a screen capture endpoint in vCast media streaming service in ViewSonic ViewBoard unknown allows a remote, unauthenticated attacker to capture and exfiltrate the current screen content via GET requests to an unauthenticated /snapshot or /screen endpoint returning JPEGs

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.00287 · 20.1th percentile
Published
2026-10-22T01:19Z
References (2)
https://blog.l3afs.space/posts/Vcast-Viewsonic-RCE-chain/ · [email protected]https://kb.cert.org/vuls/id/234131 · [email protected]
EPSS history
Timeline
  • 23 OCT 04:08Z
    EPSS moved — → 0%
    epss
  • 21 OCT 20:48Z
    CVE-2026-82987
    cvelistv5
  • 21 OCT 20:48Z
    CVE-2026-82987
    cvelistv5