CVE-2026-75928 — Brushfire unauthenticated information disclosure
The Brushfire platform's video content streaming application (https://online.brushfire.com) exposes database path in requests to users, allowing a remote, unauthenticated attack…
Published: 2026-08-21 · CVSS: 6.9 · CVSS 4.0
The Brushfire platform's video content streaming application (https://online.brushfire.com) exposes database path in requests to users, allowing a remote, unauthenticated attacker to read information about other users. Fixed February 2026.
Source: CVE Program · Revision 8b16575c39f1e1810c5e863010da073d2d3285e7