PatchTheCVEnimbletech vulnerabilities
Recent CVEs affecting nimbletech products. 4 tracked.
nimbletech has 4 tracked vulnerabilities, 1 critical. A fixed release or vendor patch exists for 0. Most recent: 2026-01-27. Highest priority: CVE-2026-24346 (score 41/100).
- CVE-2026-24348 MEDIUM 6.1 MITIGATE Multiple cross-site scripting vulnerabilities in Admin UI of EZCast Pro II version 1.17478.146 allow attackers
- CVE-2026-24347 MEDIUM 5.3 MITIGATE Improper input validation in Admin UI of EZCast Pro II version 1.17478.146 allows attackers to manipulate file
- CVE-2026-24346 CRITICAL 9.1 MITIGATE Use of well-known default credentials in Admin UI of EZCast Pro II version 1.17478.146 allows attackers to acc
- CVE-2026-24345 HIGH 8.8 MITIGATE Cross-Site Request Forgery in Admin UI of EZCast Pro II version 1.17478.146 allows attackers to bypass authori
FAQ
How do I fix nimbletech vulnerabilities?
Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.
Is nimbletech being exploited right now?
None of the tracked nimbletech CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.
Which nimbletech CVE should I patch first?
CVE-2026-24346 currently ranks highest (41/100): Use of well-known default credentials in Admin UI of EZCast Pro II version 1.17478.146 allows attackers to acc.