Read the docs

EZCast

Records7All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical2CVSS 9.0–10.0
CVSS high3CVSS 7.0–8.9

Exploited now

EZCast records in CISA KEV

No EZCast vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records
Ezcast Pro Dongle Ii Firmware 4 records LOW

Records

4 records in Ezcast Pro Dongle Ii Firmware · all components

TI-2026-19619 CVE-2026-24346 · GHSA-cq4v-33m4-7gj5

Use of well-known default credentials in EZCast Pro II Dongle

Priority LOW 35

Use of well-known default credentials in Admin UI of EZCast Pro II version 1.17478.146 allows attackers to access protected areas in the web application

CVSS 4.0HIGH 7.6 Adjacent network No auth No interaction EPSS 0.00256 Published 2026-01-27 No fix listed CWE-798
TI-2026-19621 CVE-2026-24348 · GHSA-rq8q-2gpw-5fr2

Multiple cross-site scripting vulnerabilities in EZCast Pro II Dongle

Priority LOW 34

Multiple cross-site scripting vulnerabilities in Admin UI of EZCast Pro II version 1.17478.146 allow attackers to execute arbitrary JavaScript code in the browser of other Admin UI users.

CVSS 4.0HIGH 7.4 Adjacent network No auth User interaction EPSS 0.00169 Published 2026-01-27 No fix listed CWE-20
TI-2026-19618 CVE-2026-24345 · GHSA-cr4v-m7hf-7hvj

Cross-Site Request Forgery in EZCast Pro II Dongle

Priority LOW 31

Cross-Site Request Forgery in Admin UI of EZCast Pro II version 1.17478.146 allows attackers to bypass authorization checks and gain full access to the admin UI

CVSS 4.0MEDIUM 6.8 Adjacent network High privileges User interaction EPSS 0.00163 Published 2026-01-27 No fix listed CWE-20
TI-2026-19620 CVE-2026-24347 · GHSA-45hq-rq49-xwcf

Arbitrary file write to /tmp directory in EZCast Pro II Dongle

Priority LOW 25

Improper input validation in Admin UI of EZCast Pro II version 1.17478.146 allows attackers to manipulate files in the /tmp directory

CVSS 4.0MEDIUM 5.7 Adjacent network High privileges No interaction EPSS 0.002 Published 2026-01-27 No fix listed CWE-20
Open these records in search →