CVE-2026-82987: ViewSonic vCast vulnerability
There exists a screen capture endpoint in vCast media streaming service in ViewSonic ViewBoard unknown allows a remote, unauthenticated attacker to capture and exfiltrate the current screen content via GET requests to an unauthenticated /snapshot or /screen endpoint returning JPEGs
Affected Software
Event History
Frequently Asked Questions
What access does an attacker need to capture screen content?
An attacker only needs remote network access to the vCast media streaming service. The affected endpoints do not require authentication, and screen images can be retrieved with GET requests.
What data could be exposed through this issue?
The current content displayed on the ViewBoard screen can be captured and exfiltrated. The endpoints return screen captures as JPEG images.
Which endpoints should defenders check for exposure?
Check whether the vCast service exposes unauthenticated /snapshot or /screen endpoints that return JPEG content. Their availability to remote clients indicates the described exposure.