Viewsonic vulnerabilities
We track 3 vulnerabilities in Viewsonic products. 3 are rated high or critical, and none are known to be exploited. The most recent was published on October 21, 2026.
Latest Viewsonic vulnerabilities
- 7.5 High severity
vCast: Missing Authentication for Critical Functionality
There exists a screen capture endpoint in vCast media streaming service in ViewSonic ViewBoard unknown allows a remote, unauthenticated attacker to capture and exfiltrate the current screen content via GET requests to an unauthenticated /snapshot or /screen en
- 9.8 Critical severity
vCast: Improper Neutralization of Special Elements in Output Used by a Downstream Component
There is an input injection in vCast exposed network services in ViewSonic ViewBoard that allows a remote, unauthenticated attacker to inject arbitrary input into service endpoints via network-based HTTP requests to unauthenticated endpoints
- 7.5 High severity
vCast: Improper Authentication
There exists an arbitrary file download in vCast APK delivery mechanism in ViewSonic ViewBoard unknown allows a remote, unauthenticated attacker to trigger unprivileged APK installation via serving a malicious APK URL through an unauthenticated download endpoi