What is GHSA-qg44-88jp-h8xv?

GHSA-qg44-88jp-h8xv is a security advisory published by GitHub Security Advisories with High severity. The SSH service of CelloOS developed by Cellopoint has an Improper Access Control vulnerability,...

Which CVE IDs does GHSA-qg44-88jp-h8xv cover?

GHSA-qg44-88jp-h8xv covers the following CVE IDs: CVE-2026-12059. Each CVE has its own detail page on EchelonGraph Pulse with the synthesized EG score.

What is the CVSS v3 score of GHSA-qg44-88jp-h8xv?

GHSA-qg44-88jp-h8xv has a CVSS v3 base score of 8.8, published by GitHub Security Advisories.

GHSA-qg44-88jp-h8xvHighCVSS 8.8

The SSH service of CelloOS developed by Cellopoint has an Improper Access Control vulnerability,...

Vendor

GitHub Security Advisories

Published

June 12, 2026

Last Modified

June 12, 2026

🔗 CVE IDs covered (1)

CVE-2026-12059 →

📋 Description

The SSH service of CelloOS developed by Cellopoint has an Improper Access Control vulnerability, allowing authenticated remote attackers to bypass the enforced command restrictions and execute operating system commands outside the originally authorized scope.

🔗 References (4)

https://nvd.nist.gov/vuln/detail/CVE-2026-12059
https://www.twcert.org.tw/en/cp-139-10965-3ce75-2.html
https://www.twcert.org.tw/tw/cp-132-10966-3258e-1.html
https://github.com/advisories/GHSA-qg44-88jp-h8xv