CVE-2026-24348

7.4 highEPSS 0.2%

High (7.4) in nimbletech ezcast pro dongle ii firmware. EPSS 0.2% chance of exploitation in the next 30 days.

Multiple cross-site scripting vulnerabilities in Admin UI of EZCast Pro II version 1.17478.146 allow attackers to execute arbitrary JavaScript code in the browser of other Admin UI users.

Severity

CVSS 4.0

7.4 high

CVSS:4.0/AV:A/AC:H/AT:N/PR:N/UI:P/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N/AU:N/R:U

CVSS 3.1

6.1 medium

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

EPSS: 0.2% chance of exploitation in the next 30 days; higher than 6% of CVEs (scores of 2026-10-31)
CWEs: CWE-79, CWE-20
Published: 2026-01-27
Modified: 2026-06-17
Record from: the NVD, synced 2026-10-19

Affected

nimbletech:ezcast_pro_dongle_ii_firmware

References

https://hub.ntc.swiss/ntcf-2025-145332

Check your stack JSON