CVE-2026-82987

CVSS 7.5 (high) · published 2026-10-21

There exists a screen capture endpoint in vCast media streaming service in ViewSonic ViewBoard unknown allows a remote, unauthenticated attacker to capture and exfiltrate the current screen content via GET requests to an unauthenticated /snapshot or /screen endpoint returning JPEGs

Weakness: CWE-306

Source: NVD CVE-2026-82987

References

• https://blog.l3afs.space/posts/Vcast-Viewsonic-RCE-chain/
• https://kb.cert.org/vuls/id/234131

Check your software

Connect an AI agent to the FixLane MCP server or ask the Telegram bot to check what you have installed against incidents with a verified fixed version.