by Kastro
Paper/Archive/CVE-2026-28701

CVE-2026-28701

Daktronics VFC-DMP-5000 — Daktronics Controller Firmware Path Traversal

EPSS 0.7%CVSS 9.8
critical.is priorityof 100
40
CVSS 9.8 (CNA)9.8 / 10 × 3029.4Not in CISA KEV+300.0EPSS percentile 52.4.524 × 2010.5No public exploit+100.0SSVC exploitation: none+100.0
Description · from the CVE record

Various versions of Daktronics Controller Firmware could allow authenticated and unauthenticated remote users to escape the intended directory and enumerate arbitrary file system paths.

Affected

ProductAffectedFixed inSource
VFC-DMP-5000< v8.117.x.xv8.117.x.xCNA
VFC-DMP-5000< v9.43.x.xv9.43.x.xCNA
VFC-DMP-5000< v10.34.x.xv10.34.x.xCNA
DMP-5000< v10.34.x.xv10.34.x.xCNA
DMP-5000< v8.117.x.xv8.117.x.xCNA
DMP-5000< v9.43.x.xv9.43.x.xCNA
DMP-8000< v10.34.x.xv10.34.x.xCNA
DMP-8000< v8.117.x.xv8.117.x.xCNA
DMP-8000< v9.43.x.xv9.43.x.xCNA

Scores by source

icscert (CNA)9.8CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
icscert (CNA)9.3CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N
CISA ADPSSVCExploitation: none · Automatable: yes · Technical impact: total

References

refcisa.gov/news-events/ics-advisories/icsa-26-176-04refgithub.com/cisagov/CSAF/blob/develop/csaf_files/OT/white/2026/icsa-26-176-04.json