Nimbletech Ezcast Pro Dongle Ii Firmware — known CVE vulnerabilities

Every CVE whose affected-product data names Nimbletech Ezcast Pro Dongle Ii Firmware, ordered by CVSS severity, with EPSS exploit prediction and CISA KEV status.

CVEs (4)

• CVE-2026-24346 — CVSS 9.1 (critical): Use of well-known default credentials in Admin UI of EZCast Pro II version 1.17478.146 allows attackers to access protected areas in the…
• CVE-2026-24345 — CVSS 8.8 (high): Cross-Site Request Forgery in Admin UI of EZCast Pro II version 1.17478.146 allows attackers to bypass authorization checks and gain full…
• CVE-2026-24348 — CVSS 6.1 (medium): Multiple cross-site scripting vulnerabilities in Admin UI of EZCast Pro II version 1.17478.146 allow attackers to execute arbitrary…
• CVE-2026-24347 — CVSS 5.3 (medium): Improper input validation in Admin UI of EZCast Pro II version 1.17478.146 allows attackers to manipulate files in the /tmp directory