Logo
Retour à la veille

CVE-2026-82988

Publié : 6 octobre 2026
Modifié : 6 octobre 2026
Lien officiel NVD
Score CVSS
7.5
HIGH

Description détaillée

There exists an arbitrary file download in vCast APK delivery mechanism in ViewSonic ViewBoard unknown allows a remote, unauthenticated attacker to trigger unprivileged APK installation via serving a malicious APK URL through an unauthenticated download endpoint

Vecteur d'attaque (CVSS)

Vecteur brut :CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

Références et Patchs

https://blog.l3afs.space/posts/Vcast-Viewsonic-RCE-chain/https://kb.cert.org/vuls/id/234131

Dernières Vulnérabilités

CVE-2026-97680

IBM Langflow OSS 1.0.0 through 1.12.2 could allow a remote authenticated attacker to obtain sensitive information or inject malicious data due to improper access control in the vertex result caching subsystem.

VOIR DÉTAILS

CVE-2026-97679

IBM Langflow OSS 1.0.0 through 1.12.2 could allow a remote authenticated attacker to execute arbitrary code due to improper neutralization of special elements used in an OS command ('Code Injection') related to improper input validation.

VOIR DÉTAILS

CVE-2026-97678

IBM Langflow OSS 1.0.0 through 1.12.2 could allow a remote authenticated attacker to execute arbitrary code due to improper input validation.

VOIR DÉTAILS