CVE-2026-31928CWE-798

Daktronics Controller Firmware Use of Hard-coded Credentials

Critical · published June 26, 2026

CVSS v4.0
9.3
EPSS
1%
Percentile
46.4
In the wild
Unconfirmed
What it is

The DMP-5000 devices are shipped with a default administrative web account with weak authentication controls, which are not required to be changed during initial configuration or operation. Using these accounts provides full system access.

The record
Technical detail
CVSS v4.0
9.3 · CRITICAL
Vector
CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:N/SC:H/SI:H/SA:N
EPSS
0.00569 · 46.4th percentile
Weakness
CWE-798 · Use of Hard-coded Credentials
Published
2026-06-26T22:52Z
EPSS history
Timeline
  • 26 JUN 22:52Z
    Daktronics Controller Firmware Use of Hard-coded Credentials
    cvelistv5