CVE-2026-24345 MEDIUM

CVE-2026-24345: Cross-Site Request Forgery in EZCast Pro II Dongle

Vendor Ezcast

Product EZCast Pro II

Weakness CWE-20 · Input validation

Published January 27, 2026

Last update January 27, 2026

View on NVD All CVEs

CVSS base score

6.8/10

Attack vector Adjacent

Attack complexity Low

Privileges required High

User interaction —

Confidentiality —

Integrity —

CVSS vector

CVSS:4.0/AV:A/AC:L/AT:N/PR:H/UI:A/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N/AU:Y/RE:L

What the vulnerability does

01Description

Cross-Site Request Forgery in Admin UI of EZCast Pro II version 1.17478.146 allows attackers to bypass authorization checks and gain full access to the admin UI

Key dates

02Disclosure timeline

January 27, 2026 CVE published

January 27, 2026 Record updated

External resources

03References

NVD — National Vulnerability Database https://nvd.nist.gov/vuln/detail/CVE-2026-24345 CWE — Common Weakness Enumeration https://cwe.mitre.org/data/definitions/20.html

Related vulnerabilities

CVE-2026-24345: Cross-Site Request Forgery in EZCast Pro II Dongle

01Description

02Disclosure timeline

03References

04Related CVE