PT-2026-1446 · Unknown · Plexus Anblick Digital Signage Management

Published 2026-01-06 · Updated 2026-01-06 · CVE-2020-36912

Positive Technologies (AI Summary)

CVSS v3.1

9.8

Critical

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Plexus anblick Digital Signage Management version 3.1.13

Description The software contains an open redirect issue within the 'PantallaLogin' script. This allows manipulation of the pagina GET parameter, enabling attackers to redirect users to arbitrary websites due to insufficient input validation. The affected API endpoint is likely a login screen or similar functionality.

Recommendations Ensure proper input validation is implemented for the pagina parameter in the 'PantallaLogin' script.

Exploit

Fix

Open Redirect

Weakness Enumeration

CWE-601

Related Identifiers

CVE-2020-36912

Affected Products

Plexus Anblick Digital Signage Management

References · 7

• 🔥 https://packetstormsecurity.com/files/158473 · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2020-36912 · Security Note
• https://zeroscience.mk/en/vulnerabilities/ZSL-2020-5573.php · Note
• https://vulncheck.com/advisories/plexus-anblick-digital-signage-management-open-redirect-via-pagina-parameter · Note
• https://t.me/cveNotify/147864 · Telegram Post
• https://plexus.es · Note
• https://exchange.xforce.ibmcloud.com/vulnerabilities/185521 · Note