Medium severity5.3NVD Advisory· Published Aug 21, 2026· Updated Aug 21, 2026

CVE-2026-75928

Description

The Brushfire platform's video content streaming application (https://online.brushfire.com) exposes database path in requests to users, allowing a remote, unauthenticated attacker to read information about other users. Fixed February 2026.

Affected products

Brushfire/Brushfire platform's video content streaming applicationllm-fuzzy

Patches

Vulnerability mechanics

References

online.brushfire.comnvd
raw.githubusercontent.com/cisagov/CSAF/develop/csaf_files/IT/white/2026/va-26-232-01.jsonnvd
www.cve.org/CVERecordnvd

News mentions

No linked articles in our index yet.

cvss	0.345
epss	0.000
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000