CVE-2026-82988CVE-2026-82988

Descripción

There exists an arbitrary file download in vCast APK delivery mechanism in ViewSonic ViewBoard unknown allows a remote, unauthenticated attacker to trigger unprivileged APK installation via serving a malicious APK URL through an unauthenticated download endpoint

Datos: CVE.org, NVD, CISA KEV, FIRST EPSS, Ubuntu. Se publican tal como los indican las fuentes, en inglés.

Productos y versiones afectados

Referencias y parches

• https://blog.l3afs.space/posts/Vcast-Viewsonic-RCE-chain/
• https://kb.cert.org/vuls/id/234131