CVE-2026-24346 HIGH

CVE-2026-24346: Use of well-known default credentials in EZCast Pro II Dongle

Vendor Ezcast
Product EZCast Pro II
Weakness CWE-798 · Hardcoded credentials
Published January 27, 2026
Last update January 27, 2026
View on NVD All CVEs

CVSS base score

7.6/10
Attack vector Adjacent
Attack complexity High
Privileges required None
User interaction None
Confidentiality —
Integrity —

CVSS vector

CVSS:4.0/AV:A/AC:H/AT:N/PR:N/UI:N/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N/AU:N/R:U

What the vulnerability does

01Description

Use of well-known default credentials in Admin UI of EZCast Pro II version 1.17478.146 allows attackers to access protected areas in the web application

Key dates

02Disclosure timeline

January 27, 2026 CVE published
January 27, 2026 Record updated