Skip to content
CVE PROGRAM SOURCE RECORD7.5 High

CVE-2026-82988

CVE-2026-82988

Description

There exists an arbitrary file download in vCast APK delivery mechanism in ViewSonic ViewBoard unknown allows a remote, unauthenticated attacker to trigger unprivileged APK installation via serving a malicious APK URL through an unauthenticated download endpoint

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Viewsonic vCast

  • v0.0.0 to ≤ v3.2.715affected

References