CVE-2026-30282

Critical · CVSS 9.0

Cast to TV Screen Mirroring by UXGROUP LLC — Arbitrary File Overwrite via Path Traversal (CWE-22 / CWE-73) leading to arbitrary code execution or information exposure

CVSS: 9.0; nvd
EPSS: —
KEV: No
Class: other; CWE-22, CWE-73

Description

An arbitrary file overwrite vulnerability in UXGROUP LLC Cast to TV Screen Mirroring v2.2.77 allows attackers to overwrite critical internal files via the file import process, leading to arbtrary code execution or information exposure.

Search profile — drives PoC discovery

Symbols file import processCast to TV Screen MirroringUXGROUP LLCarbitrary file overwritepath traversalexternal filename control

Keywords CVE-2026-30282Cast to TV Screen MirroringUXGROUP LLCarbitrary file overwritepath traversalfile import exploitv2.2.77CWE-22CWE-73Secsys-FDU AF_CVEsscreen mirroring vulnerability

Versions: v2.2.77

Ranked PoCs (1) — best first

Heuristic ranking — not yet expert-vetted. Scored on structure + provenance, not execution.

Secsys-FDU/AF_CVEs candidate

cited in references

trickest

★ 0

Recall-favoring discovery; ranking by the Stage-4 scorer (Adam's rubric). Scanner/aggregator repos are hidden.

References

Status: enriched · ingested 2026-07-05T06:00:39.000Z · profiled 2026-07-06T06:30:39.000Z