CVE-2026-31928

🗓️ 26 Jun 2026 23:17:08Reported by [email protected]Type

nvd

nvd🔗 web.nvd.nist.gov👁 15 Views

CVE-2026-31928: DMP-5000 ships with a default admin account with weak authentication that is not required to change, enabling full system access.

Reporter	Title	Published	Views	Family All 7
ATTACKERKB	CVE-2026-31928	26 Jun 202622:52	–	attackerkb
Circl	CVE-2026-31928	25 Jun 202617:15	–	circl
CVE	CVE-2026-31928	26 Jun 202622:52	–	cve
Cvelist	CVE-2026-31928 Daktronics Controller Firmware Use of Hard-coded Credentials	26 Jun 202622:52	–	cvelist
EUVD	EUVD-2026-39925	27 Jun 202600:30	–	euvd
Positive Technologies	PT-2026-52988	26 Jun 202600:00	–	ptsecurity
Vulnrichment	CVE-2026-31928 Daktronics Controller Firmware Use of Hard-coded Credentials	26 Jun 202622:52	–	vulnrichment

NVD

Node

AND

OR

daktronics dmp-5000_firmwareRange<8.117.0.0

daktronics dmp-5000_firmwareRange9.0.0.0–9.43.0.0

daktronics dmp-5000_firmwareRange10.0.0.0–10.34.0.0

daktronics dmp-5000Match-

Node

AND

OR

daktronics dmp-8000_firmwareRange<8.117.0.0

daktronics dmp-8000_firmwareRange9.0.0.0–9.43.0.0

daktronics dmp-8000_firmwareRange10.0.0.0–10.34.0.0

daktronics dmp-8000Match-

Node

AND

OR

daktronics vfc-dmp-5000_firmwareRange<8.117.0.0

daktronics vfc-dmp-5000_firmwareRange9.0.0.0–9.43.0.0

daktronics vfc-dmp-5000_firmwareRange10.0.0.0–10.34.0.0

daktronics vfc-dmp-5000Match-

Source	Link
github	www.github.com/cisagov/CSAF/blob/develop/csaf_files/OT/white/2026/icsa-26-176-04.json
cisa	www.cisa.gov/news-events/ics-advisories/icsa-26-176-04

06 Jul 2026 17:58Current

CVSS 3.18.1 - 9.8

CVSS 49.3

EPSS0.00569

default admin account weak authentication change not required full system access