CVE-2020-36923

None

CVSS

—

EPSS

1.0%

Published

Jan 6, 2026

CISA due date

—

The record

Sony BRAVIA Digital Signage 1.7.8 contains an insecure direct object reference vulnerability that allows attackers to bypass authorization controls. Attackers can access hidden system resources like '/#/content-creation' by manipulating client-side access restrictions.

Affected packages

Ecosystem	Package	Introduced	Fixed