CyberSecBulletin

BrightSign vulnerabilities

We track 2 vulnerabilities in BrightSign products across 2 products. 2 are rated high or critical, and none are known to be exploited. The most recent was published on February 12, 2026.

2vulnerabilities
0critical
2high
0exploited
8.1average CVSS score

Latest BrightSign vulnerabilities

  • 8.4 High severity

    BrightSign OS series 4 players: Use of Default Credentials

    CVE-2025-54756BrightSign

    BrightSign players running BrightSign OS series 4 prior to v8.5.53.1 or series 5 prior to v9.0.166 use a default password that is guessable with knowledge of the device information. The latest release fixes this issue for new installations; users of old instal

  • 7.8 High severity

    BrightSign OS series 4 players: Execution with Unnecessary Privileges

    CVE-2025-3925BrightSign

    BrightSign players running BrightSign OS series 4 prior to v8.5.53.1 or series 5 prior to v9.0.166 contain an execution with unnecessary privileges vulnerability, allowing for privilege escalation on the device once code execution has been obtained.