{"id":"CVE-2026-82987","kind":"vulnerability","aliases":["CVE-2026-82987"],"related":[],"title":"ViewSonic ViewBoard vCast: unauthenticated endpoint leaks live screen captures","description":"There exists a screen capture endpoint in vCast media streaming service in ViewSonic ViewBoard unknown allows a remote, unauthenticated attacker to capture and exfiltrate the current screen content via GET requests to an unauthenticated /snapshot or /screen endpoint returning JPEGs","summary":"The vCast media streaming service on ViewSonic ViewBoard interactive displays exposes a /snapshot or /screen endpoint that returns JPEG captures without authentication. A remote attacker can fetch the current screen contents and exfiltrate whatever is on the display.","severity":"high","cvss":null,"epss":0.00287,"exploited":false,"exploited_at":null,"products":[],"ecosystems":[],"tags":["infrastructure","iot","self-hosted","viewboard","viewsonic"],"not_affected_if":["isolated-network","no-vcast-service"],"how_to_check":"- Check whether the ViewBoard display's vCast service is reachable from your network on its listening port, using a request to `/snapshot` or `/screen` and confirming a JPEG comes back.\n- Confirm the exact ViewBoard firmware and vCast version in use; the sources do not list affected versions, so this is unknown.","fix":"- unknown. The sources do not name a fixed firmware or vCast version; check the ViewSonic advisory for ViewBoard firmware updates.\n- Until a patch is applied, block external access to the ViewBoard's vCast port at the network edge.","status":"open","published_at":"2026-10-21T21:19:17+00:00","first_seen_at":"2026-10-23T21:57:29+00:00","triaged_at":"2026-10-25T05:02:01+00:00","updated_at":"2026-10-25T05:02:01+00:00","category":"infrastructure","confidence":0.6,"triage":{"at":"2026-10-25T05:02:01Z","model":"claude-haiku-5-5","output":{"fix":"- unknown. The sources do not name a fixed firmware or vCast version; check the ViewSonic advisory for ViewBoard firmware updates.\n- Until a patch is applied, block external access to the ViewBoard's vCast port at the network edge.","reach":"network","title":"ViewSonic ViewBoard vCast: unauthenticated endpoint leaks live screen captures","impact":"medium","summary":"The vCast media streaming service on ViewSonic ViewBoard interactive displays exposes a /snapshot or /screen endpoint that returns JPEG captures without authentication. A remote attacker can fetch the current screen contents and exfiltrate whatever is on the display.","category":"infrastructure","nicknames":[],"who_cares":["viewsonic","viewboard","iot","self-hosted"],"confidence":0.6,"needs_auth":"no","worst_case":"Attacker reads the live screen contents remotely without credentials","analyst_note":"Find the ViewSonic advisory and the affected vCast/firmware versions and the fixed release; the NVD entry gave no CPE or version range.","how_to_check":"- Check whether the ViewBoard display's vCast service is reachable from your network on its listening port, using a request to `/snapshot` or `/screen` and confirming a JPEG comes back.\n- Confirm the exact ViewBoard firmware and vCast version in use; the sources do not list affected versions, so this is unknown.","needs_analyst":true,"not_affected_if":["no-vcast-service","isolated-network"],"who_is_affected":"Organizations running ViewSonic ViewBoard interactive displays with the vCast media streaming service reachable from a network an attacker can reach. Displays kept off untrusted networks and not exposed through port forwarding or public addressing are much less exposed. The sources do not state which firmware versions are affected.","user_interaction":"no","needs_special_setup":"unknown","severity_if_unknown":"high"},"cost_usd":0.00067,"input_tokens":3353,"output_tokens":669,"severity_before":"unknown"},"analyst_status":null,"analyst_note":null,"search":"'-2026':11A,14A '-82987':12A,15A '/screen':37B,97C '/snapshot':35B,95C 'allow':76C 'attack':47B,80C 'authent':44B 'captur':9A,42B,65C,82C 'content':53B,88C 'current':51B,86C 'cve':10A,13A 'display':32B,60B 'endpoint':5A,38B,66C,98C 'exfiltr':55B,84C 'exist':62C 'expos':33B 'fetch':49B 'get':90C 'host':20B 'infrastructur':16B 'interact':31B 'iot':17B 'jpeg':41B,100C 'leak':6A 'live':7A 'media':25B,69C 'remot':46B,78C 'request':91C 'return':40B,99C 'screen':8A,52B,64C,87C 'self':19B 'self-host':18B 'servic':27B,71C 'stream':26B,70C 'unauthent':4A,79C,94C 'unknown':75C 'vcast':3A,24B,68C 'via':89C 'viewboard':2A,21B,30B,74C 'viewson':1A,22B,29B,73C 'whatev':56B 'without':43B","nicknames":[],"mitigations":[],"who_affected":"Organizations running ViewSonic ViewBoard interactive displays with the vCast media streaming service reachable from a network an attacker can reach. Displays kept off untrusted networks and not exposed through port forwarding or public addressing are much less exposed. The sources do not state which firmware versions are affected.","tier":"B","verified":{},"analyst_revisit_at":null,"first_public_at":"2026-10-21T21:19:17+00:00","kev":null,"cvss_vector":null,"cvss_by":null,"poc_count":0,"sources":[{"source":"nvd","external_id":"CVE-2026-82987","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-82987","severity":null,"published_at":"2026-10-21T21:19:17+00:00","modified_at":"2026-10-22T17:40:46+00:00","first_seen_at":"2026-10-23T21:57:29+00:00","fetched_at":"2026-10-23T22:29:02+00:00","note":null},{"source":"epss","external_id":"CVE-2026-82987","url":"https://api.first.org/data/v1/epss?cve=CVE-2026-82987","severity":null,"published_at":null,"modified_at":null,"first_seen_at":"2026-10-24T13:15:54+00:00","fetched_at":"2026-10-24T13:15:54+00:00","note":null}],"documents":[],"notice":"Free to read at a human pace. An API with keys and an MCP server are in preparation; early access: hello@infrastack.ai"}