CVE-2026-24347

Improper input validation in Admin UI of EZCast Pro II version 1.17478.146 allows attackers to manipulate files in the /tmp directory

Score

CVSS 4.0 5.7 Medium

Status

Analyzed - vulnerability@ncsc.ch

Published

2026-01-27

Last modified

2026-01-27

Weaknesses

CWE-20

Affected products

• Ezcast Pro Ii (Ezcast)
• Ezcast Pro Dongle Ii Firmware (Nimbletech)

References

• https://hub.ntc.swiss/ntcf-2025-32806