What is GHSA-7f5v-mvwm-33f5?

GHSA-7f5v-mvwm-33f5 is a security advisory published by GitHub Security Advisories with unknown severity. Improper neutralization of input during web page generation ('Cross-site Scripting') in the...

Which CVE IDs does GHSA-7f5v-mvwm-33f5 cover?

GHSA-7f5v-mvwm-33f5 covers the following CVE IDs: CVE-2026-116627. Each CVE has its own detail page on EchelonGraph Pulse with the synthesized EG score.

GHSA-7f5v-mvwm-33f5unknown

Improper neutralization of input during web page generation ('Cross-site Scripting') in the...

Vendor

GitHub Security Advisories

Published

October 27, 2026

Last Modified

October 27, 2026

🔗 CVE IDs covered (1)

CVE-2026-116627 →

📋 Description

Improper neutralization of input during web page generation ('Cross-site Scripting') in the notifications feature in Devolutions PowerShell Universal 2026.3.0 and earlier allows an authenticated user with notification creation permission to execute arbitrary JavaScript in the browser of another user via a crafted notification target URL.

🔗 References (3)

https://nvd.nist.gov/vuln/detail/CVE-2026-116627
https://devolutions.net/security/advisories/DEVO-2026-0038
https://github.com/advisories/GHSA-7f5v-mvwm-33f5