Skip to content
OpenAdvisories
High · 8.1 CVE-2026-31928 EUVD-2026-39925GHSA-rf2w-j7p7-rw94

Daktronics Controller Firmware Use of Hard-coded Credentials

Published Jun 26, 2026 · Updated Jun 29, 2026 · Assigned by icscert

Description

The DMP-5000 devices are shipped with a default administrative web account with weak authentication controls, which are not required to be changed during initial configuration or operation. Using these accounts provides full system access.

Affected products

VendorProductAffectedFixed
Daktronics VFC-DMP-5000 < v8.117.x.x, < v9.43.x.x, < v10.34.x.x v8.117.x.x
Daktronics DMP-5000 < v10.34.x.x, < v8.117.x.x, < v9.43.x.x v10.34.x.x
Daktronics DMP-8000 < v10.34.x.x, < v8.117.x.x, < v9.43.x.x v10.34.x.x

Advisories 1

References