Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
2 selected

4 records

Vendor: EZCast Component: Ezcast Pro Dongle Ii Firmware Clear all filters
TI-2026-19621 CVE-2026-24348 · GHSA-rq8q-2gpw-5fr2

Multiple cross-site scripting vulnerabilities in EZCast Pro II Dongle

Priority LOW 34

Multiple cross-site scripting vulnerabilities in Admin UI of EZCast Pro II version 1.17478.146 allow attackers to execute arbitrary JavaScript code in the browser of other Admin UI users.

CVSS 4.0HIGH 7.4 Adjacent network No auth User interaction EPSS 0.00169 Published 2026-01-27 No fix listed CWE-20
TI-2026-19620 CVE-2026-24347 · GHSA-45hq-rq49-xwcf

Arbitrary file write to /tmp directory in EZCast Pro II Dongle

Priority LOW 25

Improper input validation in Admin UI of EZCast Pro II version 1.17478.146 allows attackers to manipulate files in the /tmp directory

CVSS 4.0MEDIUM 5.7 Adjacent network High privileges No interaction EPSS 0.002 Published 2026-01-27 No fix listed CWE-20
TI-2026-19619 CVE-2026-24346 · GHSA-cq4v-33m4-7gj5

Use of well-known default credentials in EZCast Pro II Dongle

Priority LOW 35

Use of well-known default credentials in Admin UI of EZCast Pro II version 1.17478.146 allows attackers to access protected areas in the web application

CVSS 4.0HIGH 7.6 Adjacent network No auth No interaction EPSS 0.00256 Published 2026-01-27 No fix listed CWE-798
TI-2026-19618 CVE-2026-24345 · GHSA-cr4v-m7hf-7hvj

Cross-Site Request Forgery in EZCast Pro II Dongle

Priority LOW 31

Cross-Site Request Forgery in Admin UI of EZCast Pro II version 1.17478.146 allows attackers to bypass authorization checks and gain full access to the admin UI

CVSS 4.0MEDIUM 6.8 Adjacent network High privileges User interaction EPSS 0.00163 Published 2026-01-27 No fix listed CWE-20