What is GHSA-pjrx-22r5-wchr?

GHSA-pjrx-22r5-wchr is a security advisory published by GitHub Security Advisories with High severity. Prior to 9/18/2026, the iSteamX mobile application's AWS policy could grant authenticated users...

Which CVE IDs does GHSA-pjrx-22r5-wchr cover?

GHSA-pjrx-22r5-wchr covers the following CVE IDs: CVE-2026-95699. Each CVE has its own detail page on EchelonGraph Pulse with the synthesized EG score.

What is the CVSS v3 score of GHSA-pjrx-22r5-wchr?

GHSA-pjrx-22r5-wchr has a CVSS v3 base score of 9.6, published by GitHub Security Advisories.

GHSA-pjrx-22r5-wchrHighCVSS 9.6

Prior to 9/18/2026, the iSteamX mobile application's AWS policy could grant authenticated users...

Vendor

GitHub Security Advisories

Published

September 24, 2026

Last Modified

September 24, 2026

🔗 CVE IDs covered (1)

CVE-2026-95699 →

📋 Description

Prior to 9/18/2026, the iSteamX mobile application's AWS policy could grant authenticated users access to wildcard MQTT topics, which can expose other users' device data and allow the attacker to start and stop other connected users' devices. This risked exposing user profile information and potential scalding due to unintended device activation.

🔗 References (4)

https://nvd.nist.gov/vuln/detail/CVE-2026-95699
https://raw.githubusercontent.com/cisagov/CSAF/develop/csaf_files/VA/white/2026/va-26-267-01.json
https://www.mrsteam.com/contactus
https://github.com/advisories/GHSA-pjrx-22r5-wchr