What is GHSA-hvhx-5pgp-4359?

GHSA-hvhx-5pgp-4359 is a security advisory published by GitHub Security Advisories with unknown severity. Improper access control in the connection history in Devolutions Server 2026.3.13.0 allows an...

Which CVE IDs does GHSA-hvhx-5pgp-4359 cover?

GHSA-hvhx-5pgp-4359 covers the following CVE IDs: CVE-2026-126327. Each CVE has its own detail page on EchelonGraph Pulse with the synthesized EG score.

GHSA-hvhx-5pgp-4359unknown

Improper access control in the connection history in Devolutions Server 2026.3.13.0 allows an...

Vendor

GitHub Security Advisories

Published

November 12, 2026

Last Modified

November 12, 2026

🔗 CVE IDs covered (1)

CVE-2026-126327 →

📋 Description

Improper access control in the connection history in Devolutions Server 2026.3.13.0 allows an authenticated user without the permission to view passwords to obtain historical entry passwords via the connection history API.

🔗 References (3)

https://nvd.nist.gov/vuln/detail/CVE-2026-126327
https://devolutions.net/security/advisories/DEVO-2026-0041
https://github.com/advisories/GHSA-hvhx-5pgp-4359