TI-2026-53155 CVE-2026-75928 · GHSA-9339-3h6v-jp8c
Brushfire unauthenticated information disclosure
Priority LOW 31
The Brushfire platform's video content streaming application (https://online.brushfire.com) exposes database path in requests to users, allowing a remote, unauthenticated attacker to read information about other users.