CVE-2026-30282
UXGROUP LLC Cast to TV Screen Mirroring version 2.2.77 contains a critical flaw that lets attackers overwrite internal files via the file import feature. This can enable arbitrary code execution or the exposure of sensitive data. The vulnerability is rated CVSS 9.0.
No official fix yet. If none appears within 45 days of first tracking, this entry is removed automatically.
Who is affected
UXGROUP LLC Cast to TV Screen Mirroring v2.2.77, used on smart TVs and compatible devices that support screen mirroring.
Real-world impact
An attacker could replace critical system files, run malicious code, or steal sensitive information from the device, potentially taking full control of the TV.
Why this severity
The CVSS score of 9.0 reflects that the flaw is network‑accessible, requires low attack complexity, and has high impact on confidentiality, integrity, and availability, allowing attackers to easily gain full control.
What to do about it
No official fix or mitigation is documented in the sources yet. Monitor the vendor advisory and apply the patch as soon as it is released.
No fix documented in sources
Timeline
- Mar 31, 2026 · Mar 31, 2026PublishedDisclosed and added to the National Vulnerability Database.
- Jul 24, 2026 · 12d agoAdvisory updatedThe NVD record was last revised.
How it’s attacked
References & advisories
- appcraze.coproduct
- github.com/Secsys-FDU/AF_CVEs/issues/2…third party advisory
- secsys.fudan.edu.cnnot applicable