What is GHSA-hvh9-4462-hhv5?

GHSA-hvh9-4462-hhv5 is a security advisory published by GitHub Security Advisories with High severity. A low privileged remote attacker can hijack an active administrative session without needing to...

Which CVE IDs does GHSA-hvh9-4462-hhv5 cover?

GHSA-hvh9-4462-hhv5 covers the following CVE IDs: CVE-2026-14948. Each CVE has its own detail page on EchelonGraph Pulse with the synthesized EG score.

What is the CVSS v3 score of GHSA-hvh9-4462-hhv5?

GHSA-hvh9-4462-hhv5 has a CVSS v3 base score of 8.8, published by GitHub Security Advisories.

GHSA-hvh9-4462-hhv5HighCVSS 8.8

A low privileged remote attacker can hijack an active administrative session without needing to...

Vendor

GitHub Security Advisories

Published

August 20, 2026

Last Modified

August 20, 2026

🔗 CVE IDs covered (1)

CVE-2026-14948 →

📋 Description

A low privileged remote attacker can hijack an active administrative session without needing to know the administrator password by extracting live plaintext session identifiers for authenticated users from downloadable error log archives.

🔗 References (3)

https://nvd.nist.gov/vuln/detail/CVE-2026-14948
https://www.certvde.com/en/advisories/VDE-2026-078
https://github.com/advisories/GHSA-hvh9-4462-hhv5