CVE-2026-75928
MEDIUM
NVD
CVSS Score
5.3
Severity
MEDIUM
Published
Aug 21, 2026
Vendor
unknown
Description
The Brushfire platform's video content streaming application (https://online.brushfire.com) exposes database path in requests to users, allowing a remote, unauthenticated attacker to read information about other users. Fixed February 2026.