Arbitrary File Download Vulnerability in ViewBoard by ViewSonic

CVE-2026-82988

What is CVE-2026-82988?

An arbitrary file download vulnerability exists in the APK delivery mechanism of ViewSonic's ViewBoard. This flaw enables a remote, unauthenticated attacker to trigger the installation of unprivileged APKs. By leveraging a malicious APK URL through an unauthenticated download endpoint, attackers can exploit this vulnerability to compromise devices running the ViewBoard software. It's crucial for users to implement security measures to mitigate the risks associated with this vulnerability.

References