1. Home
  2. CVE Database
  3. CVE-2026-28701
CRITICAL · 9.8

CVE-2026-28701

Various versions of Daktronics Controller Firmware could allow authenticated and unauthenticated remote users to escape the intended directory and enumerate arbitrary file system paths.

Vulnerability Description

Various versions of Daktronics Controller Firmware could allow authenticated and unauthenticated remote users to escape the intended directory and enumerate arbitrary file system paths.

CVSS Score

9.8

CRITICAL

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality
HIGH
Integrity
HIGH
Availability
HIGH

Affected Products

VendorProductVersions
DaktronicsDmp-5000 Firmware< 8.117.0.0
DaktronicsDmp-5000-
DaktronicsDmp-8000 Firmware< 8.117.0.0
DaktronicsDmp-8000-
DaktronicsVfc-Dmp-5000 Firmware< 8.117.0.0
DaktronicsVfc-Dmp-5000-

Related Weaknesses (CWE)

CWE-22

References

FAQ

What is CVE-2026-28701?

CVE-2026-28701 is a vulnerability with a CVSS score of 9.8 (CRITICAL). Various versions of Daktronics Controller Firmware could allow authenticated and unauthenticated remote users to escape the intended directory and enumerate arbitrary file system paths.

How severe is CVE-2026-28701?

CVE-2026-28701 has been rated CRITICAL with a CVSS base score of 9.8/10. This is considered a critical vulnerability requiring immediate attention.

Is there a patch for CVE-2026-28701?

Check the references section above for vendor advisories and patch information. Affected products include: Daktronics Dmp-5000 Firmware, Daktronics Dmp-5000, Daktronics Dmp-8000 Firmware, Daktronics Dmp-8000, Daktronics Vfc-Dmp-5000 Firmware.