CVE-2020-36892: Eibiz I-Media Server Digital Signage

Critical severity, CVSS 9.8. EPSS: 1.1% chance of exploitation in the next 30 days.

Eibiz i-Media Server Digital Signage 3.8.0 contains an unauthenticated privilege escalation vulnerability in the updateUser object that allows attackers to modify user roles. Attackers can exploit the /messagebroker/amf endpoint to elevate privileges and take over user accounts by manipulating role settings without authentication.

Affected products

• Eibiz I-Media Server Digital Signage: version 3.8.0 only

Published 2025-12-10. Last modified 2026-06-17.