CVE-2026-28701CWE-22

Daktronics Controller Firmware Path Traversal

Critical · published June 26, 2026

CVSS v4.0
9.3
EPSS
1%
Percentile
51.8
In the wild
Unconfirmed
What it is

Various versions of Daktronics Controller Firmware could allow authenticated and unauthenticated remote users to escape the intended directory and enumerate arbitrary file system paths.

The record
Technical detail
CVSS v4.0
9.3 · CRITICAL
Vector
CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N
EPSS
0.00680 · 51.8th percentile
Weakness
CWE-22 · Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
Published
2026-06-26T22:40Z
EPSS history
Timeline
  • 26 JUN 22:40Z
    Daktronics Controller Firmware Path Traversal
    cvelistv5