{"vulnerability": "cve-2026-31928", "sightings": [{"uuid": "cb862714-e037-4298-b95c-854b279a92db", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-31928", "type": "seen", "source": "https://www.cisa.gov/news-events/ics-advisories/icsa-26-176-04", "content": "", "creation_timestamp": "2026-06-25T17:15:12.198960Z"}, {"uuid": "654ff985-8d41-481b-a79a-0d0ebe150d85", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-31928", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mpadupa4lk2o", "content": "CVE-2026-31928 - Daktronics Controller Firmware Use of Hard-coded Credentials\nCVE ID : CVE-2026-31928\n \n Published : June 26, 2026, 10:52 p.m. | 2\u00a0hours, 52\u00a0minutes ago\n \n Description : The DMP-5000 devices are shipped with a default administrative web account with weak authen...", "creation_timestamp": "2026-06-27T01:51:06.892866Z"}, {"uuid": "48a3f2f2-ed0e-4b77-8daf-1ca09c338c81", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-31928", "type": "seen", "source": "https://bsky.app/profile/offseq.bsky.social/post/3mpb3uhxhnl2y", "content": "Daktronics VFC-DMP-5000: HIGH severity (CVSS 8.1) flaw allows takeover via default admin credentials. No patch \u2014 change defaults &amp; restrict web admin access. Details: https://radar.offseq.com/threat/cve-2026-31928-cwe-798-in-daktronics-vfc-dmp-5000-1b5c53a213436e5b #OffSeq #Vulnerability #Cyberse...", "creation_timestamp": "2026-06-27T09:00:28.781989Z"}, {"uuid": "2d9325ff-d622-4204-847d-7de6bd1b4de0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-31928", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mpbpyzrlfl27", "content": "\ud83d\udfe0 CVE-2026-31928 - High (8.1)\n\nThe DMP-5000 devices are shipped with a default administrative web account with weak authenticati...\n\nhttps://www.thehackerwire.com/vulnerability/CVE-2026-31928/\n\n#infosec #cybersecurity #CVE #vulnerability #security #patchstack", "creation_timestamp": "2026-06-27T15:00:56.838149Z"}]}