Brushfire vulnerabilities

🔔 Create alert RSS

Published CVEs affecting Brushfire products: 1 record(s), with severity, exploitation and fixes.

Online Experience 1

Exploited only (KEV) →

CVE-2026-75928 Medium · 5.3 CWE-497 Aug 21, 2026

Brushfire unauthenticated information disclosure

The Brushfire platform's video content streaming application (https://online.brushfire.com) exposes database path in requests to users, allowing a remote, unauthenticated attacker to read information about other users. Fixed February 2026.