CVE Watch21 ago 2026

CVE-2026-75928

The Brushfire platform's video content streaming application (https://online.brushfire.com) exposes database path in requests to users, allo

CVSS

5.3

Medio

EPSS

—

KEV

—

Exploit Today

—

0-100

Publicado: 21 ago 2026 · Última mod.: 21 ago 2026 · CWE-497

EPSS · 30d

Sin historial EPSS suficiente todavía.

Descripción técnica

The Brushfire platform's video content streaming application (https://online.brushfire.com) exposes database path in requests to users, allowing a remote, unauthenticated attacker to read information about other users. Fixed February 2026.

Referencias oficiales

CVEs relacionados

CVECVSSEPSSKEVRExplotTítuloVis.

CVE-2026-672675.5 MED

1.1%

——0Dell Command Update (DCU), versions prior to 5.7.1, contain an Exposure of Sensitive System Information to an Unauthorized Control Sphere vulnerability. A low privileged attacker with local access could potentially exploit this vulnerability, leading to Information disclosure.8h CVE-2026-740075.3 MED

15.4%

——5Unauthenticated Sensitive Data Exposure in 3D FlipBook – PDF Flipbook Viewer, Flipbook Image Gallery <= 1.16.20 versions.1d CVE-2026-324687.5 ALT

23.0%

——7Unauthenticated Sensitive Data Exposure in Duitku Payment Gateway <= 2.11.14 versions.1d CVE-2024-583757.5 ALT

17.3%

——5OpenTofu versions 1.8.0 through 1.8.2 do not properly restrict sensitive variables and locals when users have opted into static evaluation of module sources, versions, and backend configurations. As a result, values marked as sensitive may be exposed through these configuration elements instead of producing an error. This is fixed in OpenTofu 1.8.3, which adds explicit errors to prevent the use of sensitive values in these contexts.4d CVE-2026-664627.5 ALT

23.0%

——7Unauthenticated Sensitive Data Exposure in WooCommerce Appointments <= 5.3.8 versions.7d CVE-2026-664446.5 MED

28.8%

——9Subscriber Sensitive Data Exposure in Payment Forms for Paystack <= 4.0.5 versions.7d