{"id":"CVE-2026-82987","title":"CVE-2026-82987","summary":"There exists a screen capture endpoint in vCast media streaming service in ViewSonic ViewBoard unknown allows a remote, unauthenticated attacker to capture and exfiltrate the current screen content via GET requests to an unauthenticated …","severity":"none","cwe":["CWE-306"],"vendor":"Viewsonic","product":"vCast","affected":["vCast >= v0.0.0 <= v3.2.715"],"published":"2026-10-21","updated":"2026-10-21","sourceUpdated":"2026-10-21T20:48:10.861Z","source":"CVEORG","sourceUrl":"https://www.cve.org/CVERecord?id=CVE-2026-82987","references":[{"url":"https://blog.l3afs.space/posts/Vcast-Viewsonic-RCE-chain/"},{"url":"https://kb.cert.org/vuls/id/234131"}],"tags":["cve.org"],"ingestedAt":"2026-10-21T21:13:32.883Z","slug":"CVE-2026-82987","body":"## Overview\n\nThere exists a screen capture endpoint in vCast media streaming service in ViewSonic ViewBoard unknown allows a remote, unauthenticated attacker to capture and exfiltrate the current screen content via GET requests to an unauthenticated /snapshot or /screen endpoint returning JPEGs\n\n## Affected\n\n- `vCast >= v0.0.0 <= v3.2.715`\n\n## Remediation\n\nRefer to the linked advisories for vendor-supplied fixes and affected version ranges.","depth":"sunlit","depthScore":3,"depthScoreParts":{"impact":2.8,"likelihood":0,"exploitation":0,"ransomware":0},"changes":[]}