# CVE-2026-82988: ViewSonic ViewBoard arbitrary APK download via unauthenticated endpoint

Source: https://junglewise.ai/threats/cve-2026-82988-there-exists-an-arbitrary-file-download-in-vcast-apk-delivery  
Publisher: Junglewise Threat Intelligence, https://junglewise.ai/threats  
Published: 2026-10-06. Updated: 2026-10-06  
License: CC BY 4.0 with a link back

CVE-2026-82988 · Severity: info · Published 2026-10-06

ViewSonic ViewBoard is a smartboard used in enterprise and educational environments for wireless content presentation. An attacker on the network can trigger installation of malicious applications without user knowledge by sending a specially crafted command to an unauthenticated endpoint, potentially allowing full device compromise and lateral movement to the connected network.

Technologies: [ViewSonic ViewBoard](https://junglewise.ai/threats/technologies/viewboard). Vendors: [ViewSonic](https://junglewise.ai/threats/vendors/viewsonic).

## Quick answers

**Is CVE-2026-82988 exploited in the wild?** No. Junglewise Threat Intelligence has no report of CVE-2026-82988 being exploited in the wild.

**How severe is CVE-2026-82988?** Informational severity, published 6 October 2026.

**Which products and versions are affected?** ViewSonic ViewBoard.

**Is there a fix for CVE-2026-82988?** No fixed version is recorded yet. Segment vCast devices onto an isolated, secure network separate from systems containing sensitive data. Monitor network activity for suspicious vCast connections.</anigation>
<parameter name="timeline">[{"kind": "disclosed", "at": "2026-09-24"}, {"kind": "advisory", "at": "2026-10-06"}] If you run it, Junglewise drafts a mitigation that fits your setup and applies it once you approve, with senior security engineers behind it.

**How is CVE-2026-82988 attacked?** It is attacked over the network, in a network appliance.

**Am I affected by CVE-2026-82988?** Check whether you run ViewSonic ViewBoard. Junglewise does that check for you around the clock: connect your code, cloud and domains, and it matches new vulnerabilities like this one against what you actually run and tells you when one reaches you.

## How to fix


Segment vCast devices onto an isolated, secure network separate from systems containing sensitive data. Monitor network activity for suspicious vCast connections.</anigation>
<parameter name="timeline">[{"kind": "disclosed", "at": "2026-09-24"}, {"kind": "advisory", "at": "2026-10-06"}]

## Technical details

The vCast APK delivery mechanism on TCP port 8121 accepts plaintext commands without authentication. An unauthenticated attacker can send a "downloadapk" command with a malicious APK URL to trigger installation; chaining this with key event injection allows automatic confirmation without user interaction. The vulnerability has no authentication or authorization checks on this control socket.

## Affected products

- ViewSonic ViewBoard

## References

- [https://blog.l3afs.space/posts/Vcast-Viewsonic-RCE-chain/](https://blog.l3afs.space/posts/Vcast-Viewsonic-RCE-chain/)
- [https://kb.cert.org/vuls/id/234131](https://kb.cert.org/vuls/id/234131)

## Related threats

- [ViewSonic ViewBoard vCast unauthenticated screen capture](https://junglewise.ai/threats/cve-2026-82987-there-exists-a-screen-capture-endpoint-in-vcast-media-streaming)
- [ViewSonic ViewBoard vCast input injection vulnerability](https://junglewise.ai/threats/cve-2026-82989-there-is-an-input-injection-in-vcast-exposed-network-services-in)