CVE-2026-100902: Barco ClickShare CX-20 Gen2 Wallpaper Upload wallpaper denial of service
A vulnerability was determined in Barco ClickShare CX-20 Gen2 up to 02.26.00.0007. Affected by this issue is some unknown functionality of the file /wallpaper of the component Wallpaper Upload. This manipulation of the argument wallpaper causes denial of service. The attack can be initiated remotely. The exploit has been publicly disclosed and may be utilized. The vendor was contacted early about this disclosure but did not respond in any way.
Affected Software
Event History
Frequently Asked Questions
What access does an attacker need to trigger the denial of service?
The issue can be exploited remotely, but the published CVSS vector indicates that the attacker needs low-level privileges. No user interaction is required.
Which systems may be affected?
Barco ClickShare CX-20 Gen2 devices through version 02.26.00.0007 are identified as affected. The available information does not state whether the Wallpaper Upload functionality is enabled or exposed by default.
Is public exploit information available?
Yes. The exploit has been publicly disclosed and may be used by attackers.
What is the likely impact of successful exploitation?
Successful manipulation of the wallpaper argument in the Wallpaper Upload component can cause a denial of service. The supplied severity vector indicates availability impact only, with no stated confidentiality or integrity impact.