CVE Feed

    Dashboard / CVE / CVE-2026-24344

    CVE-2026-24344

    Multiple Buffer Overflows in Admin UI of EZCast Pro II version 1.17478.146 allow attackers to cause a program crash and potential remote code execution

    Published:Jan 27, 2026
    Last Modified:Apr 18, 2026
    EPS:Jan 27, 2026
    EPSS Score:0.00058
    CVSS Score:7.3

    Affected Products

    Vendor
    Actions-micro
    Product
    Ezcast Pro Ii
    Vendor
    Actions-micro
    Product
    Ezcast Pro Ii Firmware

    Exploits

    No exploit reference

    Related CVEs

    CVE-2026-24348 (CVSS 7.4) — Multiple cross-site scripting vulnerabilities in Admin UI of EZCast Pro II version 1.17478.146 allow attackers…
    CVE-2026-24347 (CVSS 5.7) — Improper input validation in Admin UI of EZCast Pro II version 1.17478.146 allows attackers to manipulate file…
    CVE-2026-24346 (CVSS 7.6) — Use of well-known default credentials in Admin UI of EZCast Pro II version 1.17478.146 allows attackers to acc…
    CVE-2026-24345 (CVSS 6.8) — Cross-Site Request Forgery in Admin UI of EZCast Pro II version 1.17478.146 allows attackers to bypass authori…
    CVE-2025-13955 (CVSS 9.3) — Predictable default Wi-Fi Password in Access Point functionality in EZCast Pro II before version 1.17478.177 a…
    CVE-2025-13954 (CVSS 9.3) — Hard-coded cryptographic keys in Admin UI of EZCast Pro II before version 1.17478.177 allows attackers to bypa…
    CVE-2019-12305 (CVSS 6.5) — In EZCast Pro II, the administrator password md5 hash is provided upon a web request. This hash can be cracked…

    Common Vulnerability Scoring System

    Attack Vector
    Network
    Adjacent
    Local
    Physical
    Privileges Required
    None
    Low
    High
    User Interaction
    None
    Required
    Scope
    Unchanged
    Changed
    Confidentiality
    None
    Low
    High
    Integrity
    None
    Low
    High
    Availability
    None
    Low
    High