Read the docs
TI-2026-65040 Aliases CVE-2026-100902GHSA-q2rq-5hf8-g6jh

Barco ClickShare CX-20 Gen2 Wallpaper Upload wallpaper improper validation of syntactic correctness of input

Priority MEDIUM 64CWE-1286Published · Updated

Key facts

Attack vector
Network
Privileges required
Low
User interaction
None
Attack complexity
Low
Attack requirements
None
Impact type
—
Confidentiality · integrity · availability
None · None · High
Fix status
No fix listed

Attack profile from CVSS 4.0 · CNA. Fix status from CNA.

Summary

A vulnerability was determined in Barco ClickShare CX-20 Gen2 up to 02.26.00.0007. Affected by this issue is some unknown functionality of the file /wallpaper of the component Wallpaper Upload. This manipulation of the argument wallpaper causes improper validation of syntactic correctness of input. The attack can be initiated remotely. The exploit has been publicly disclosed and may be utilized. The vendor was contacted early about this disclosure but did not respond in any way.

Why it matters now

Exploitation Proof of concept CISA SSVC · not in CISA KEV
EPSS 0.00334 26th percentileScored 2026-11-07
Public exploit Yes 1 exploit referenceTagged by the CNA
Fix No fix listed No fixed version in the sources yet

SSVC decision points

CISA ADP · SSVC 2.0.3

Exploitation
Poc
Automatable
No
Technical impact
Partial

The decision (Track, Attend, Act) also depends on your mission and well-being impact; see CISA's SSVC guide.

Affected products

VendorProductAffected versionsFixed inStatusSource
BarcoClickShare CX-20 Gen202.26.00.0007—No fix listedCNA
  • ClickShare CX-20 Gen2 VendorBarco Affected 02.26.00.0007 Fixed in — No fix listed CNA

CPE names CNA · 1

CPEVersionsRoleVendor
cpe:2.3:a:barco:clickshare_cx-20_gen2:*:*:*:*:*:*:*:*——Barco
  • cpe:2.3:a:barco:clickshare_cx-20_gen2:*:*:*:*:*:*:*:* Versions — — ·Barco

Remediation

No fixed version listed by the sources yet.

Timeline

  1. 2026-10-02 Threatist record created from CVE-2026-100902
  2. 2026-10-03 Alias added: GHSA-q2rq-5hf8-g6jh

References

Exploit 1

  • TI-2019-02935 Cross-site scripting in Crestron AirMedia, Barco WePresent, Extron ShareLink, Teq AV IT… KEVCVSS 3.1CRITICAL 9.8
  • TI-2016-02639 Barco ClickShare CSC-1 devices with firmware before 01.09.03 and CSM-1 devices with… CVSS 3.0CRITICAL 9.8
  • TI-2019-02936 Stack-based buffer overflow in Crestron AirMedia, Barco WePresent, Extron ShareLink, Teq… CVSS 3.1CRITICAL 9.8
  • TI-2020-17184 Barco wePresent WiPG-1600W devices use Hard-coded Credentials (issue 2 of 2). CVSS 3.1CRITICAL 9.8
  • TI-2022-09639 Barco Control Room Management through Suite 2.9 Build 0275 was discovered to be… CVSS 3.1HIGH 7.5
  • TI-2020-13251 Barco TransForm NDN-210 Lite, NDN-210 Pro, NDN-211 Lite, and NDN-211 Pro before 3.8… CVSS 3.1CRITICAL 9.8
See all 40 →

Sources

This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences