Cross-Site Scripting Vulnerability in EZCast Pro II Admin Interface
CVE-2026-24348

7.4HIGH

Key Information:

Vendor

Ezcast

Status
Ezcast Pro Ii
Vendor
CVE Published:
27 January 2026

What is CVE-2026-24348?

Multiple cross-site scripting vulnerabilities exist within the Admin UI of EZCast Pro II version 1.17478.146. These vulnerabilities allow attackers to inject and execute arbitrary JavaScript code in the browsers of other users accessing the Admin UI, potentially compromising sensitive information or executing unwanted actions.

Human OS v1.0:
Ageing Is an Unpatched Zero-Day Vulnerability.

Remediate biological technical debt. Prime Ageing uses 95% high-purity SIRT6 activation to maintain genomic integrity and bolster systemic resilience.

Deploy the Patch

Affected Version(s)

EZCast Pro II 1.17478.146

References

https://hub.ntc.swiss/ntcf-2025-145332

CVSS V4

Score:
7.4
Severity:
HIGH
Confidentiality:
High
Integrity:
High
Availability:
None
Attack Vector:
Adjacent Network
Attack Complexity:
High
Attack Required:
None
Privileges Required:
Undefined
User Interaction:
Unknown

Timeline

  • Vulnerability published

  • Vulnerability Reserved

Credit

Swiss National Test Institute for Cybersecurity NTC
Redguard AG
Swiss National Cybersecurity Centre
JSON
.