Filtered by vendor Brightpick Ai Subscriptions
Filtered by product Mission Control Subscriptions
Total 2 CVE
CVE Vendors Products Updated CVSS v3.1
CVE-2025-64309 1 Brightpick Ai 1 Mission Control 2025-11-15 8.6 High
Brightpick Mission Control discloses device telemetry, configuration, and credential information via WebSocket traffic to unauthenticated users when they connect to a specific URL. The unauthenticated URL can be discovered through basic network scanning techniques.
CVE-2025-64308 1 Brightpick Ai 1 Mission Control 2025-11-15 7.5 High
The Brightpick Mission Control web application exposes hardcoded credentials in its client-side JavaScript bundle.