CVE-2025-54756CWE-1392

BrightSign Players Use of Default Credentials

High · published February 12, 2026

CVSS v4.0
8.6
EPSS
0%
Percentile
3.6
In the wild
Unconfirmed
What it is

BrightSign players running BrightSign OS series 4 prior to v8.5.53.1 or

series 5 prior to v9.0.166 use a default password that is guessable with

knowledge of the device information. The latest release fixes this

issue for new installations; users of old installations are encouraged

to change all default passwords.

The record
Technical detail
CVSS v4.0
8.6 · HIGH
Vector
CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N
EPSS
0.00147 · 3.6th percentile
Weakness
CWE-1392 · Use of Default Credentials
Published
2026-02-12T16:34Z
EPSS history
Timeline
  • 12 FEB 16:34Z
    BrightSign Players Use of Default Credentials
    cvelistv5