What is GHSA-2jgc-c4h3-xw55?

GHSA-2jgc-c4h3-xw55 is a security advisory published by GitHub Security Advisories with Critical severity. Improper Restriction of Excessive Authentication Attempts, Use of Password Hash With Insufficient...

Which CVE IDs does GHSA-2jgc-c4h3-xw55 cover?

GHSA-2jgc-c4h3-xw55 covers the following CVE IDs: CVE-2026-30790. Each CVE has its own detail page on EchelonGraph Pulse with the synthesized EG score.

What is the CVSS v3 score of GHSA-2jgc-c4h3-xw55?

GHSA-2jgc-c4h3-xw55 has a CVSS v3 base score of 9.8, published by GitHub Security Advisories.

GHSA-2jgc-c4h3-xw55CriticalCVSS 9.8

Improper Restriction of Excessive Authentication Attempts, Use of Password Hash With Insufficient...

Vendor

GitHub Security Advisories

Published

March 5, 2026

Last Modified

June 22, 2026

🔗 CVE IDs covered (1)

CVE-2026-30790 →

📋 Description

Improper Restriction of Excessive Authentication Attempts, Use of Password Hash With Insufficient Computational Effort vulnerability in rustdesk-server-pro RustDesk Server Pro rustdesk-server-pro on Windows, MacOS, Linux (Peer authentication, API login modules), rustdesk-server RustDesk Server (OSS) rustdesk-server on Windows, MacOS, Linux (Peer authentication, API login modules) allows Password Brute Forcing. This vulnerability is associated with program files src/server/connection.Rs and program routines Salt/challenge generation, SHA256(SHA256(pwd+salt)+challenge) verification.

This issue affects RustDesk Server Pro: through 1.7.5; RustDesk Server (OSS): through 1.1.15.

🔗 References (5)

https://nvd.nist.gov/vuln/detail/CVE-2026-30790
https://github.com/rustdesk
https://docs.google.com/document/d/e/2PACX-1vSds6jjpd38oO_yIAyd1HYtKNUuea-I-ozAPpGhYI7QgAU-QGJ7D8a4rOZVj1vmiUXV1EcdRHf9aZAW/pub
https://www.vulsec.org
https://github.com/advisories/GHSA-2jgc-c4h3-xw55