Security Advisory
CVE-2026-75928
CVE vulnerability detail - eXtreme Datacenter Security Operations
Description
The Brushfire platform's video content streaming application (https://online.brushfire.com) exposes database path in requests to users, allowing a remote, unauthenticated attacker to read information about other users. Fixed February 2026.