CVE-2020-36923 – Sony BRAVIA Digital Signage 1.7.8 Client-Side Protection Bypass via IDOR

CVE ID : CVE-2020-36923

Published : Jan. 6, 2026, 3:52 p.m. | 34 minutes ago

Description : Sony BRAVIA Digital Signage 1.7.8 contains an insecure direct object reference vulnerability that allows attackers to bypass authorization controls. Attackers can access hidden system resources like ‘/#/content-creation’ by manipulating client-side access restrictions.

Severity: 9.8 | CRITICAL

Visit the link for more details, such as CVSS details, affected products, timeline, and more…