CVE-2020-36888: Spinetix Fusion Digital Signage

Medium severity, CVSS 5.3. EPSS: 0.4% chance of exploitation in the next 30 days.

SpinetiX Fusion Digital Signage 3.4.8 contains a username enumeration vulnerability in its login script that allows attackers to identify valid user accounts. Attackers can send crafted login requests with different usernames to distinguish between existing and non-existing accounts by analyzing the server's error responses.

Affected products

• Spinetix Fusion Digital Signage: up to and including 3.4.8

Published 2025-12-10. Last modified 2026-06-17.