Search vulnerabilities

Use the Query Builder to create your own search query, or check out the documentation to learn the search syntax.

Results 3

Export CSV
CVE-2025-64309

Brightpick Mission Control / Internal Logic Control Unprotected Transport of Credentials

The affected product discloses device telemetry, configuration, and sensitive information via WebSocket traffic to unauthenticated users when they connect to a specific URL. The unauthenticated URL can be discovered through basic network scanning techniques.

CVSS 4.0 · 6 Medium EPSS < 1% KEV · Not listed
Vendors
Brightpick Ai
Products
Mission Control
CVE-2025-64307

Brightpick Mission Control / Internal Logic Control Missing Authentication for Critical Function

The Brightpick Internal Logic Control web interface is accessible without requiring user authentication. An unauthorized user could exploit this interface to manipulate robot control functions, including initiating or halting runners, assigning jobs, clearing stations, and deploying storage totes.

CVSS 4.0 · 7.1 High EPSS < 1% KEV · Not listed
Vendors
Brightpick Ai
Products
Internal Logic Control
CVE-2025-64308

Brightpick Mission Control / Internal Logic Control Unprotected Transport of Credentials

The Brightpick Mission Control web application exposes hardcoded credentials in its client-side JavaScript bundle to Brightpick AI's documentation portal.

CVSS 4.0 · 7.1 High EPSS < 1% KEV · Not listed
Vendors
Brightpick Ai
Products
Mission Control