Vulnerability Description
The DMP-5000 devices are shipped with a default administrative web account with weak authentication controls, which are not required to be changed during initial configuration or operation. Using these accounts provides full system access.
CVSS Score
HIGH
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Daktronics | Dmp-5000 Firmware | < 8.117.0.0 |
| Daktronics | Dmp-5000 | - |
| Daktronics | Dmp-8000 Firmware | < 8.117.0.0 |
| Daktronics | Dmp-8000 | - |
| Daktronics | Vfc-Dmp-5000 Firmware | < 8.117.0.0 |
| Daktronics | Vfc-Dmp-5000 | - |
Related Weaknesses (CWE)
References
- https://github.com/cisagov/CSAF/blob/develop/csaf_files/OT/white/2026/icsa-26-17Third Party Advisory
- https://www.cisa.gov/news-events/ics-advisories/icsa-26-176-04Third Party AdvisoryUS Government Resource
FAQ
What is CVE-2026-31928?
CVE-2026-31928 is a vulnerability with a CVSS score of 8.1 (HIGH). The DMP-5000 devices are shipped with a default administrative web account with weak authentication controls, which are not required to be changed during initial configuration or operation. Using thes...
How severe is CVE-2026-31928?
CVE-2026-31928 has been rated HIGH with a CVSS base score of 8.1/10. Review the CVSS metrics above for detailed severity breakdown.
Is there a patch for CVE-2026-31928?
Check the references section above for vendor advisories and patch information. Affected products include: Daktronics Dmp-5000 Firmware, Daktronics Dmp-5000, Daktronics Dmp-8000 Firmware, Daktronics Dmp-8000, Daktronics Vfc-Dmp-5000 Firmware.