> CVE-2026-30496

« BACK_TO_HOME
PUBLISHED
2026-05-07 14:16
MODIFIED
2026-05-07 14:16
EPSS (Prob. Exploit)
0.61%
Top 51.6%
DATA SOURCES:
NVD 🔗 2026-05-07 FIRST EPSS 🔗 2026-10-25

> DESCRIPTION

The Optoma CinemaX P2 projector (firmware TVOS-04.24.010.04.01, Android 8.0.0) exposes an HTTP API on TCP port 2345 that allows full unauthenticated remote control of the device. The API supports both reading configuration (74 endpoints) and writing/modifying settings including volume, mute, brightness, power, network protocols enable/disable (including TELNET), display modes, and other projector functions. Any device on the same network can control the projector without authentication.

> AFFECTED_PRODUCTS

ℹ️ Aucun produit affecté n'a encore été publié par NVD pour cette CVE.

> HISTORIQUE DES MODIFICATIONS

Première apparition
07/05/2026 14:16
Source: NVD
Total des modifications: 0 Dernière mise à jour: 6 months ago

> REFERENCES

https://whitelabel.org/security/2026-02-01-smart-projector/
« BACK_TO_HOME