Security Advisory
CVE-2025-64309
CVE vulnerability detail — eXtreme Datacenter Security Operations
Description
Brightpick Mission Control discloses device telemetry, configuration, and credential information via WebSocket traffic to unauthenticated users when they connect to a specific URL. The unauthenticated URL can be discovered through basic network scanning techniques.