# Sony BRAVIA Digital Signage has three flaws, including API information disclosure

- Date: 2026-01-06
- Location: Global
- Type: Vulnerability
- Sector: Vendor
- CVE: CVE-2020-36922, CVE-2020-36923, CVE-2020-36924
- Products: [BRAVIA Signage Free](https://signagelist.org/products/bravia-signage-free/)

NVD published 3 vulnerabilities in Sony BRAVIA Digital Signage, covering information disclosure, insecure object references and cross-site scripting. In version 1.7.8, an information disclosure flaw lets unauthenticated attackers access sensitive system details through API endpoints.

## Sources

- [CVE-2020-36922](https://nvd.nist.gov/vuln/detail/CVE-2020-36922) (NIST NVD)
- [CVE-2020-36923](https://nvd.nist.gov/vuln/detail/CVE-2020-36923) (NIST NVD)
- [CVE-2020-36924](https://nvd.nist.gov/vuln/detail/CVE-2020-36924) (NIST NVD)
- [https://cxsecurity.com/issue/WLB-2020120028](https://cxsecurity.com/issue/WLB-2020120028)
- [https://exchange.xforce.ibmcloud.com/vulnerabilities/192606](https://exchange.xforce.ibmcloud.com/vulnerabilities/192606)

Page: https://signagelist.org/incidents/2026-01-sony-bravia-digital-signage-has-three-flaws/