CVE-2026-24345 - Cross-Site Request Forgery in EZCast Pro II Dongle

Back Back to CVE browser

MEDIUM

Cross-Site Request Forgery in EZCast Pro II Dongle

Published Jan 27, 2026

6.8

MEDIUM

CVSS 4.0

EPSS 0.16%

Description

Cross-Site Request Forgery in Admin UI of EZCast Pro II version 1.17478.146 allows attackers to bypass authorization checks and gain full access to the admin UI

Affected products

Vendor EZCast Product EZCast Pro II Default
affected
- Version
  1.17478.146
  Status
  affected
  Constraints
  -

Default status is the baseline for the product, each version can override it (e.g. patched versions marked unaffected).

Vendor

Product

Default status

Versions

EZCast

EZCast Pro II

affected

Version	Status	Constraints
1.17478.146	affected	-

Remediation

Vendor solution

Until a firmware patch is made available by the vendor, users are advised to disconnect the dongle from their local network and limit its use strictly to Access Point functionality to minimize the attack surface.

Weaknesses (2)

CWE-20

Improper Input Validation

CWE-352

CSRF