https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-05T12:12:13.771466+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/euvd-2026-268218 EUVD-2026-268218 2026-10-05T12:12:13.776803+00:00 EUVD-2026-268218 https://cve.radiocsirt.org/vuln/fkie_cve-2025-54756 fkie_cve-2025-54756 2026-10-05T12:12:13.776848+00:00

BrightSign players running BrightSign OS series 4 prior to v8.5.53.1 or series 5 prior to v9.0.166 use a default password that is guessable with knowledge of the device information. The latest release fixes this issue for new installations; users of old installations are encouraged to change all default passwords.

 https://cve.radiocsirt.org/vuln/ghsa-j8xr-3xqm-72rh GHSA-j8xr-3xqm-72rh 2026-10-05T12:12:13.776880+00:00

BrightSign players running BrightSign OS series 4 prior to v8.5.53.1 or series 5 prior to v9.0.166 use a default password that is guessable with knowledge of the device information. The latest release fixes this issue for new installations; users of old installations are encouraged to change all default passwords.

 https://cve.radiocsirt.org/vuln/icsa-25-126-03 ICSA-25-126-03 — BrightSign Players (Update A) 2026-10-05T12:12:13.776897+00:00

BrightSign players running BrightSign OS series 4 prior to v8.5.53.1 or series 5 prior to v9.0.166 contain an execution with unnecessary privileges vulnerability, allowing for privilege escalation on the device once code execution has been obtained. BrightSign players running BrightSign OS series 4 prior to v8.5.53.1 or series 5 prior to v9.0.166 use a default password that is guessable with knowledge of the device information. The latest release fixes this issue for new installations; users of old installations are encouraged to change all default passwords.