CVE-2026-82989: Viewsonic Vcast

Critical severity, CVSS 9.8. EPSS: 0.7% chance of exploitation in the next 30 days.

There is an input injection in vCast exposed network services in ViewSonic ViewBoard that allows a remote, unauthenticated attacker to inject arbitrary input into service endpoints via network-based HTTP requests to unauthenticated endpoints

Affected products

• Viewsonic Vcast: from v0.0.0, up to and including v3.2.715

Published 2026-10-06. Last modified 2026-10-06.