Skip to content
COOEY

EXPOSURES › CVE-2026-31928

CVE-2026-31928

HIGH
DETAIL
SourceNVD · cve Published2026-06-26 CVSS8.1 Referencehttps://nvd.nist.gov/vuln/detail/CVE-2026-31928 ↗
SHAME 25/100

The DMP-5000 devices are shipped with a default administrative web account with weak authentication controls, which are not required to be changed during initial configuration or operation. Using these accounts provides full system access.

▸ RECOMMENDED ACTION  Patch the affected products and confirm your instances are covered.

PLAYERS IMPLICATED
daktronics · vendordmp-5000 · productdmp-5000 firmware · productdmp-8000 · productdmp-8000 firmware · productvfc-dmp-5000 · productvfc-dmp-5000 firmware · product
DESCRIPTION

The DMP-5000 devices are shipped with a default administrative web account with weak authentication controls, which are not required to be changed during initial configuration or operation. Using these accounts provides full system access.

AFFECTED FEDRAMP PRODUCTS · 0
No correlated FedRAMP products.