Vulnerabilities

CVSS

9.8 Critical

Vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Risk score

78.4

Published

2026-06-26

Status

Published

Various versions of Daktronics Controller Firmware could allow authenticated and unauthenticated remote users to escape the intended directory and enumerate arbitrary file system paths.

Weaknesses

CWE-22

Coverage 2

threat-intel

⚡ Weekly Recap: Proxy Botnets, Browser Ransomware, AI Agent Tricks, Fake PoC Malware and More

This week’s security recap highlighted several concerning trends, including a disruption of the NetNut residential proxy network used for botnet operations, a fake Proof-of-Concept (PoC) malware targeting vulnerability r…

The Hacker News · Jul 6, 2026 High

CVE-2026-48276CVE-2026-48283CVE-2026-48277USESSPbotnetproxymalware

vulnerability

Daktronics Controller Firmware

This CISA advisory details a vulnerability in Daktronics Controller Firmware versions up to v10.34.x.x, allowing unauthenticated users to gain root-level access and potentially execute arbitrary code due to a lack of pro…

CISA Advisories · Jun 25, 2026 Critical

CVE-2026-28701CVE-2026-33560CVE-2026-31928USfirmwareroot accessfile upload

All articles mentioning it

Advisories and references

• cisa.gov/news-events/ics-advisories/icsa-26-176-04
• github.com/cisagov/CSAF/blob/develop/csaf_files/OT/white/2026/icsa-2...