CVE-2026-24345

6.8 mediumEPSS 0.2%

Medium (6.8) in nimbletech ezcast pro dongle ii firmware. EPSS 0.2% chance of exploitation in the next 30 days.

Cross-Site Request Forgery in Admin UI of EZCast Pro II version 1.17478.146 allows attackers to bypass authorization checks and gain full access to the admin UI

Severity

CVSS 4.0

6.8 medium

CVSS:4.0/AV:A/AC:L/AT:N/PR:H/UI:A/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N/AU:Y/RE:L

CVSS 3.1

8.8 high

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

EPSS: 0.2% chance of exploitation in the next 30 days; higher than 5% of CVEs (scores of 2026-10-31)
CWEs: CWE-352, CWE-20
Published: 2026-01-27
Modified: 2026-06-17
Record from: the NVD, synced 2026-10-19

Affected

nimbletech:ezcast_pro_dongle_ii_firmware

References

https://hub.ntc.swiss/ntcf-2025-32832

Check your stack JSON