Skip to content
OpenAdvisories
High · 7.5 CVE-2026-82988 EUVD-2026-92874GHSA-g3x9-2gpf-9qg7

CVE-2026-82988

Published Oct 5, 2026 · Updated Oct 6, 2026 · Assigned by certcc

Description

There exists an arbitrary file download in vCast APK delivery mechanism in ViewSonic ViewBoard unknown allows a remote, unauthenticated attacker to trigger unprivileged APK installation via serving a malicious APK URL through an unauthenticated download endpoint

Affected products

VendorProductAffectedFixed
Viewsonic vCast v0.0.0 – ≤ v3.2.715 —

References