critical9.8
CVE-2026-28701
Various versions of Daktronics Controller Firmware could allow authenticated and unauthenticated remote users to escape the intended directory and enumerate ar…
Impact
Various versions of Daktronics Controller Firmware could allow authenticated and unauthenticated remote users to escape the intended directory and enumerate arbitrary file system paths.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Daktronics | Dmp-5000 Firmware | before 8.117.0.0 from 9.0.0.0 before 9.43.0.0 from 10.0.0.0 before 10.34.0.0 |
| Daktronics | Dmp-8000 Firmware | before 8.117.0.0 from 9.0.0.0 before 9.43.0.0 from 10.0.0.0 before 10.34.0.0 |
| Daktronics | Vfc-Dmp-5000 Firmware | before 8.117.0.0 from 9.0.0.0 before 9.43.0.0 from 10.0.0.0 before 10.34.0.0 |