Vulnerabilidades de Nimbletech

🔔 Criar alerta RSS

CVEs publicadas que afetam produtos de Nimbletech: 4 registro(s), com severidade, exploração e correções.

Ezcast Pro Dongle Ii Firmware 4

Somente exploradas (KEV) →

CVE-2026-24348 Média · 6.1 CWE-79 27/01/2026

Multiple cross-site scripting vulnerabilities in EZCast Pro II Dongle

Multiple cross-site scripting vulnerabilities in Admin UI of EZCast Pro II version 1.17478.146 allow attackers to execute arbitrary JavaScript code in the browser of other Admin UI users.

CVE-2026-24347 Média · 5.3 CWE-20 27/01/2026

Arbitrary file write to /tmp directory in EZCast Pro II Dongle

Improper input validation in Admin UI of EZCast Pro II version 1.17478.146 allows attackers to manipulate files in the /tmp directory

CVE-2026-24346 Crítica · 9.1 CWE-798 27/01/2026

Use of well-known default credentials in EZCast Pro II Dongle

Use of well-known default credentials in Admin UI of EZCast Pro II version 1.17478.146 allows attackers to access protected areas in the web application

CVE-2026-24345 Alta · 8.8 CWE-352 27/01/2026

Cross-Site Request Forgery in EZCast Pro II Dongle

Cross-Site Request Forgery in Admin UI of EZCast Pro II version 1.17478.146 allows attackers to bypass authorization checks and gain full access to the admin UI