Paper/Archive/CVE-2026-24346

CVE-2026-24346

EZCast EZCast Pro II — Use of well-known default credentials in EZCast Pro II Dongle

CVSS 9.1 (NVD)9.1 / 10 × 3027.3 Not in CISA KEV+300.0 EPSS percentile 17.3.173 × 203.5 No public exploit+100.0 SSVC exploitation: none+100.0

Description · from the CVE record

Use of well-known default credentials in Admin UI of EZCast Pro II version 1.17478.146 allows attackers to access protected areas in the web application

Affected

ProductAffectedFixed inSource

EZCast Pro II1.17478.146–CNA

Scores by source

NVD9.1CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N

NCSC.ch (CNA)7.6CVSS:4.0/AV:A/AC:H/AT:N/PR:N/UI:N/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N/AU:N/R:U

CISA ADPSSVCExploitation: none · Automatable: no · Technical impact: total

References

refhub.ntc.swiss/ntcf-2025-13993