CVE-2025-64309

8.6HIGH

Brightpick Mission Control discloses device telemetry, configuration, and credential information via WebSocket traffic to unauthenticated users when they connect to a specific URL. The unauthentica

Published: 11/15/2025Updated: 11/18/2025
View on NVDView on MITRE

Description

Brightpick Mission Control discloses device telemetry, configuration, and credential information via WebSocket traffic to unauthenticated users when they connect to a specific URL. The unauthenticated URL can be discovered through basic network scanning techniques.

AI AnalysisPowered by AI

References