Skip to content
OpenAdvisories

Vendor

Brightpick AI

3 known vulnerabilities.

Products

Brightpick Mission Control / Internal Logic Control 3
All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • High 7.4
    CVE-2025-64309

    Brightpick Mission Control / Internal Logic Control Unprotected Transport of Credentials

    The affected product discloses device telemetry, configuration, and sensitive information via WebSocket traffic to unauthenticated users when they connect to a specific URL. The unauthenticated URL can be discovered through basic network scanning techniques.

    Brightpick AI Brightpick Mission Control / Internal Logic Control