Brushfire Online Experience vulnerabilities

🔔 Create alert RSS Version checker

Published CVEs affecting Brushfire Online Experience: 1 record(s), with affected versions and fixes.

CVE-2026-75928 Medium · 5.3 CWE-497 Aug 21, 2026

Brushfire unauthenticated information disclosure

The Brushfire platform's video content streaming application (https://online.brushfire.com) exposes database path in requests to users, allowing a remote, unauthenticated attacker to read information about other users. Fixed February 2026.