Security Notices
Announcements about security issues which may affect BrightSign's products and services will be posted here. You can select the bell icon in the top left corner to receive an email whenever the page is updated.
For information about our SOC 2 Compliance, see this page.
BrightSign reviews the list of known Common Vulnerabilities and Exposures (CVEs) affecting the OS on a quarterly basis and posts information about them here.
Q4 2026 Security Statement
November 3: BrightSign is aware of CVE-2026-98432, CVE-2026-91403, CVE-2026-114820 and CVE-2026-111497 and is working to address them in BrightSign OS. The BOS 9.1.173, BOS 10.0.31 and 8.5.77 releases address these issues. The 9.0 branch update will ship over the next few days and we will confirm that version number as it becomes available.