CVE-2020-36887: Spinetix Fusion Digital Signage

High severity, CVSS 7.5. EPSS: 0.4% chance of exploitation in the next 30 days.

SpinetiX Fusion Digital Signage 3.4.8 contains an unauthenticated information disclosure vulnerability in the database backup directory. Attackers can access the /content/files/backups/ endpoint to download sensitive backup files containing user credentials and system information.

Affected products

• Spinetix Fusion Digital Signage: up to and including 3.4.8

Published 2025-12-10. Last modified 2026-06-17.