Vulnerability · Published Dec 10, 2025 · Assigned by VulnCheck

CVE-2020-36884BrightSign Digital Signage Diagnostic Web Server 8.2.26 Unauthenticated SSRF

Medium 6.9

In plain English

A medium-severity server-side request forgery in BrightSign Digital Signage Diagnostic Web Server from BrightSign, LLC. Proof-of-concept exploit code is public. The chance it is exploited in the next 30 days is estimated at 1.1% (higher than 66% of all known vulnerabilities). Ready-made attack tooling exists: Nuclei.

Severity (CVSS 4.0)6.9Medium

Exploit odds (30 days)1.1%top 33.7% of all CVEs

Exploited in the wildNo reportsCISA SSVC: poc

Attack tooling1Nuclei

Official description

BrightSign Digital Signage Diagnostic Web Server 8.2.26 and less contains an unauthenticated server-side request forgery vulnerability in the 'url' GET parameter of the Download Speed Test service. Attackers can specify external domains to bypass firewalls and perform network enumeration by forcing the application to make arbitrary HTTP requests to internal network hosts.

Affected products (as reported)

Vendor	Product	Versions
BrightSign, LLC	BrightSign Digital Signage Diagnostic Web Server	0 – through 8.2.26

Weakness: CWE-918 · Vector: CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:L/VA:N/SC:L/SI:L/SA:L

References

ExploitDB-48843 exploit
BrightSign Homepage product
Zero Science Lab Disclosure third-party-advisory
Zero Science GitHub Repository issue-tracking
VulnCheck Advisory: BrightSign Digital Signage Diagnostic Web Server 8.2.26 Unauthenticated SSRF third-party-advisory