Brightsign
5 CVEs across 4 Brightsign products. Browse Brightsign vulnerabilities, severities, and proof-of-concept exploits.
Brightsign products with known CVEs
Brightsign CVEs — newest first| CVE | Severity | Score | Published | Summary |
|---|
CVE-2025-54756 | High | 8.4 | 2026-02-12 | BrightSign players running BrightSign OS series 4 prior to v8.5.53.1 or
series 5 prior to v9.0.166 use a default password that is guessable with
knowledge of… |
CVE-2025-3925 | High | 7.8 | 2025-05-07 | BrightSign players running BrightSign OS series 4 prior to v8.5.53.1 or
series 5 prior to v9.0.166 contain an execution with unnecessary
privileges vulnerabi… |
CVE-2017-17739 | Critical | 9.8 | 2017-12-18 | The BrightSign Digital Signage (4k242) device (Firmware 6.2.63 and below) has directory traversal via the /storage.html rp parameter, allowing an attacker to r… |
CVE-2017-17738 | High | 7.5 | 2017-12-18 | The BrightSign Digital Signage (4k242) device (Firmware 6.2.63 and below) allows renaming and modifying files via /tools.html. |
CVE-2017-17737 | Medium | 6.1 | 2017-12-18 | The BrightSign Digital Signage (4k242) device (Firmware 6.2.63 and below) has XSS via the REF parameter to /network_diagnostics.html or /storage_info.html. |