Nimbletech CVEs and Security Vulnerabilities

CVE-2026-24346

Use of well-known default credentials in EZCast Pro II Dongle

Use of well-known default credentials in Admin UI of EZCast Pro II version 1.17478.146 allows attackers to access protected areas in the web application

CVSS 4.0 · 7.6 High EPSS < 1% KEV · Not listed

Vendors

Actions-micro Nimbletech

Products

Ezcast Pro Ii Ezcast Pro Ii Firmware Ezcast Pro Dongle Ii and 1 more

CVE-2026-24348

Multiple cross-site scripting vulnerabilities in EZCast Pro II Dongle

Multiple cross-site scripting vulnerabilities in Admin UI of EZCast Pro II version 1.17478.146 allow attackers to execute arbitrary JavaScript code in the browser of other Admin UI users.

CVSS 4.0 · 7.4 High EPSS < 1% KEV · Not listed

Vendors

Actions-micro Nimbletech

Products

Ezcast Pro Ii Ezcast Pro Ii Firmware Ezcast Pro Dongle Ii and 1 more

CVE-2026-24347

Arbitrary file write to /tmp directory in EZCast Pro II Dongle

Improper input validation in Admin UI of EZCast Pro II version 1.17478.146 allows attackers to manipulate files in the /tmp directory

CVSS 4.0 · 5.7 Medium EPSS < 1% KEV · Not listed

Vendors

Actions-micro Nimbletech

Products

Ezcast Pro Ii Ezcast Pro Ii Firmware Ezcast Pro Dongle Ii and 1 more

CVE-2026-24345

Cross-Site Request Forgery in EZCast Pro II Dongle

Cross-Site Request Forgery in Admin UI of EZCast Pro II version 1.17478.146 allows attackers to bypass authorization checks and gain full access to the admin UI

CVSS 4.0 · 6.8 Medium EPSS < 1% KEV · Not listed

Vendors

Actions-micro Nimbletech

Products

Ezcast Pro Ii Ezcast Pro Ii Firmware Ezcast Pro Dongle Ii and 1 more

Search vulnerabilities

Use of well-known default credentials in EZCast Pro II Dongle

Multiple cross-site scripting vulnerabilities in EZCast Pro II Dongle

Arbitrary file write to /tmp directory in EZCast Pro II Dongle

Cross-Site Request Forgery in EZCast Pro II Dongle