Access Control Vulnerability in Xibo Digital Signage Platform

CVE-2026-52729

What is CVE-2026-52729?

Xibo, a widely-used open source digital signage platform, is affected by an access control issue that allows authenticated users to modify or delete Layout actions indiscriminately. This vulnerability arises from missing access controls on the PUT and DELETE requests for Layout actions, potentially enabling users with standard edit privileges to alter or remove content without appropriate restrictions. It is crucial for users to update to version 4.4.3 or later to mitigate this risk and ensure secure management of digital signage content.

References