What is GHSA-77jc-98pv-xc56?

GHSA-77jc-98pv-xc56 is a security advisory published by GitHub Security Advisories with High severity. Cleartext storage of sensitive information in the database in Devolutions Server 2026.3.5.0 and...

Which CVE IDs does GHSA-77jc-98pv-xc56 cover?

GHSA-77jc-98pv-xc56 covers the following CVE IDs: CVE-2026-100288. Each CVE has its own detail page on EchelonGraph Pulse with the synthesized EG score.

What is the CVSS v3 score of GHSA-77jc-98pv-xc56?

GHSA-77jc-98pv-xc56 has a CVSS v3 base score of 7.2, published by GitHub Security Advisories.

GHSA-77jc-98pv-xc56HighCVSS 7.2

Cleartext storage of sensitive information in the database in Devolutions Server 2026.3.5.0 and...

Vendor

GitHub Security Advisories

Published

September 29, 2026

Last Modified

September 30, 2026

🔗 CVE IDs covered (1)

CVE-2026-100288 →

📋 Description

Cleartext storage of sensitive information in the database in Devolutions Server 2026.3.5.0 and earlier allows an attacker with read access to the database to obtain external identity provider tokens and active session identifiers via direct inspection of stored records.

🔗 References (3)

https://nvd.nist.gov/vuln/detail/CVE-2026-100288
https://devolutions.net/security/advisories/DEVO-2026-0034
https://github.com/advisories/GHSA-77jc-98pv-xc56