Threat database

CVE-2026-100902 is a high-severity vulnerability in Barco ClickShare CX-20 Gen2 up to version 02.26.00.0007. It involves improper validation of the syntactic correctness of input in the Wallpaper Upload component, specifically in the /wallpaper file. The vulnerability can be exploited remotely without user interaction and requires low attack complexity. The vendor has not responded to the disclosure, and no patch or remediation information is currently available.

An unauthenticated command injection vulnerability exists in WePresent WiPG-1000 firmware versions prior to 2.2.3.0, due to improper input handling in the undocumented /cgi-bin/rdfs.cgi endpoint. The Client parameter is not sanitized before being passed to a system call, allowing an unauthenticated remote attacker to execute arbitrary commands as the web server user.