CVE-2026-24345

Cross-Site Request Forgery in Admin UI of EZCast Pro II version 1.17478.146 allows attackers to bypass authorization checks and gain full access to the admin UI

Score

CVSS 3.1 8.8 High

Status

Analyzed - vulnerability@ncsc.ch

Published

2026-01-27

Last modified

2026-01-27

Weaknesses

CWE-20, CWE-352

Affected products

• Ezcast Pro Ii (Ezcast)
• Ezcast Pro Dongle Ii Firmware (Nimbletech)

References

• https://hub.ntc.swiss/ntcf-2025-32832