{"id":"CVE-2026-82988","published":"2026-10-06T00:16:36.973","lastModified":"2026-10-06T15:03:59.427","description":"There exists an arbitrary file download in vCast APK delivery mechanism in ViewSonic ViewBoard unknown allows a remote, unauthenticated attacker to trigger unprivileged APK installation via serving a malicious APK URL through an unauthenticated download endpoint","cvssScore":7.5,"cvssSeverity":"HIGH","cvssVector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N","cwes":["CWE-287","CWE-434","CWE-502"],"vendors":[],"products":[],"references":[{"url":"https://blog.l3afs.space/posts/Vcast-Viewsonic-RCE-chain/","tags":[]},{"url":"https://kb.cert.org/vuls/id/234131","tags":[]}],"exploitRefs":[],"hasPoc":false,"ai":{"summary":"A remote attacker can trigger unprivileged APK installation by exploiting an arbitrary file download vulnerability in ViewSonic ViewBoard's vCast APK delivery mechanism. This allows attackers to serve malicious APK files through an unauthenticated download endpoint, potentially leading to unauthorized app installations on affected devices.","exploitability":"Exploitation is relatively straightforward as it requires only a remote, unauthenticated attacker to craft a malicious APK URL and serve it through the vulnerable download endpoint, with no additional preconditions needed.","blast_radius":"The impact could be significant in environments where ViewBoard devices are accessible to untrusted users or networks, potentially allowing attackers to install malicious applications on these devices without user interaction.","remediation":"Disable the vCast APK delivery mechanism until a patch is available, or restrict access to the affected download endpoint via network segmentation or authentication controls.","detection":"No reliable host or network indicator is derivable from the published description.","tags":["mobile","apk","unauthenticated","download"],"model":"garnet-coder","analyzedAt":"2026-10-13T09:02:43.986Z"}}