CVE-2025-3925: Brightsign OS Series 4 Players

High severity, CVSS 7.8. EPSS: 0.2% chance of exploitation in the next 30 days.

BrightSign players running BrightSign OS series 4 prior to v8.5.53.1 or series 5 prior to v9.0.166 contain an execution with unnecessary privileges vulnerability, allowing for privilege escalation on the device once code execution has been obtained.

Affected products

• Brightsign Brightsign OS Series 4 Players: before v8.5.53.1 (fixed in v8.5.53.1)
• Brightsign Brightsign OS Series 5 Players: before v9.0.166 (fixed in v9.0.166)

Published 2025-05-07. Last modified 2026-06-17.