What is GHSA-7ch6-fqvg-6pxp?

GHSA-7ch6-fqvg-6pxp is a security advisory published by GitHub Security Advisories with High severity. Asset Suite allows unauthenticated users to access HTTPPublishAdapterTestServlet that can be used...

Which CVE IDs does GHSA-7ch6-fqvg-6pxp cover?

GHSA-7ch6-fqvg-6pxp covers the following CVE IDs: CVE-2026-7395. Each CVE has its own detail page on EchelonGraph Pulse with the synthesized EG score.

GHSA-7ch6-fqvg-6pxpHigh

Asset Suite allows unauthenticated users to access HTTPPublishAdapterTestServlet that can be used...

Vendor

GitHub Security Advisories

Published

September 29, 2026

Last Modified

September 29, 2026

🔗 CVE IDs covered (1)

CVE-2026-7395 →

📋 Description

Asset Suite allows unauthenticated users to access HTTPPublishAdapterTestServlet that can be used for configuration file upload, leading to information disclosure and integrity compromise. The HTTPPublishAdapterTestServlet is specifically meant for testing purposes to be used in a non-production environment.

🔗 References (3)

https://nvd.nist.gov/vuln/detail/CVE-2026-7395
https://publisher.hitachienergy.com/preview?DocumentID=8DBD000254&LanguageCode=en&DocumentPartId=&Action=Launch
https://github.com/advisories/GHSA-7ch6-fqvg-6pxp