# Xibo CMS digital signage platform has five flaws, including privilege escalation

- Date: 2026-10-28
- Location: Global
- Type: Vulnerability
- Sector: Vendor
- CVE: CVE-2026-50541, CVE-2026-52729, CVE-2026-50539, CVE-2026-50542, CVE-2026-50543
- Products: [Xibo](https://signagelist.org/products/xibo/)

NVD published 5 vulnerabilities in Xibo CMS, covering privilege escalation and authorization bypass. Xibo is an open source digital signage platform with a web content management system and Windows display player software.

## Sources

- [CVE-2026-50541](https://nvd.nist.gov/vuln/detail/CVE-2026-50541) (NIST NVD)
- [CVE-2026-52729](https://nvd.nist.gov/vuln/detail/CVE-2026-52729) (NIST NVD)
- [CVE-2026-50539](https://nvd.nist.gov/vuln/detail/CVE-2026-50539) (NIST NVD)
- [CVE-2026-50542](https://nvd.nist.gov/vuln/detail/CVE-2026-50542) (NIST NVD)
- [https://github.com/xibosignage/xibo-cms/commit/98b347d3bf81d369ebe67bde030b913085a11556](https://github.com/xibosignage/xibo-cms/commit/98b347d3bf81d369ebe67bde030b913085a11556)
- [https://github.com/xibosignage/xibo-cms/commit/bba1bd82da8fb96919ba07462fe06ddacb22116b](https://github.com/xibosignage/xibo-cms/commit/bba1bd82da8fb96919ba07462fe06ddacb22116b)

Page: https://signagelist.org/incidents/2026-10-xibo-cms-digital-signage-platform-has-five/