Is CVE-2026-50542 being exploited?

No public exploit is currently tracked.

How severe is CVE-2026-50542?

CVE-2026-50542 has a CVSS v3 severity of MEDIUM (5.4).

Back

CVE-2026-50542

Description

Xibo is an open source digital signage platform with a web content management system and Windows display player software. Prior to 4.4.3, missing access-control checks on `GET /layout/status/{id}` allow an authenticated user with any privileges to view the `status and metadata` of any layout, including layouts for which the user does not have view rights. This issue is fixed in version 4.4.3.