CVE-2026-100902

  1. OpenCVE
  2. Vulnerabilities (CVE)
  3. CVE-2026-100902
A vulnerability was determined in Barco ClickShare CX-20 Gen2 up to 02.26.00.0007. Affected by this issue is some unknown functionality of the file /wallpaper of the component Wallpaper Upload. This manipulation of the argument wallpaper causes improper validation of syntactic correctness of input. The attack can be initiated remotely. The exploit has been publicly disclosed and may be utilized. The vendor was contacted early about this disclosure but did not respond in any way.

6.5 /10

CVSS v3 : MEDIUM

V3 Legend

Vector :

Exploitability : 2.8 / Impact : 3.6

Attack Vector NETWORK

Attack Complexity LOW

Privileges Required LOW

User Interaction NONE

Confidentiality Impact NONE

Integrity Impact NONE

Availability Impact HIGH

Scope UNCHANGED

6.8 /10

CVSS v2.0 : MEDIUM

V2 Legend

Vector : AV:N/AC:L/Au:S/C:N/I:N/A:C

Exploitability : 8.0 / Impact : 6.9

Access Vector NETWORK

Access Complexity LOW

Authentication SINGLE

Confidentiality Impact NONE

Integrity Impact NONE

Availability Impact COMPLETE

References
Link Resource
https://github.com/0xWKZER/-security-disclosures/blob/main/Barco001.md
https://vuldb.com/cve/CVE-2026-100902
https://vuldb.com/submit/919384
https://vuldb.com/vuln/410852
https://vuldb.com/vuln/410852/cti
Configurations

No configuration.

History

28 Sep 2026, 19:16

Type Values Removed Values Added
CWE CWE-404 CWE-1286
CWE-20
Summary (en) A vulnerability was determined in Barco ClickShare CX-20 Gen2 up to 02.26.00.0007. Affected by this issue is some unknown functionality of the file /wallpaper of the component Wallpaper Upload. This manipulation of the argument wallpaper causes denial of service. The attack can be initiated remotely. The exploit has been publicly disclosed and may be utilized. The vendor was contacted early about this disclosure but did not respond in any way. (en) A vulnerability was determined in Barco ClickShare CX-20 Gen2 up to 02.26.00.0007. Affected by this issue is some unknown functionality of the file /wallpaper of the component Wallpaper Upload. This manipulation of the argument wallpaper causes improper validation of syntactic correctness of input. The attack can be initiated remotely. The exploit has been publicly disclosed and may be utilized. The vendor was contacted early about this disclosure but did not respond in any way.

28 Sep 2026, 04:16

Type Values Removed Values Added
New CVE
Information

Published : 2026-09-28 04:16

Updated : 2026-09-28 19:16

NVD link : CVE-2026-100902

Mitre link : CVE-2026-100902

CVE.ORG link : CVE-2026-100902

JSON object : View

Products Affected

No product.

CWE
CWE-20

Improper Input Validation

CWE-1286

Improper Validation of Syntactic Correctness of Input