What is GHSA-rg9h-r7mc-w5vr?

GHSA-rg9h-r7mc-w5vr is a security advisory published by GitHub Security Advisories with Medium severity. Asset Suite allows unauthenticated users to access PropertiesReloadServlet, CacheFlushServlet,...

Which CVE IDs does GHSA-rg9h-r7mc-w5vr cover?

GHSA-rg9h-r7mc-w5vr covers the following CVE IDs: CVE-2026-11796. Each CVE has its own detail page on EchelonGraph Pulse with the synthesized EG score.

GHSA-rg9h-r7mc-w5vrMedium

Asset Suite allows unauthenticated users to access PropertiesReloadServlet, CacheFlushServlet,...

Vendor

GitHub Security Advisories

Published

September 29, 2026

Last Modified

September 29, 2026

🔗 CVE IDs covered (1)

CVE-2026-11796 →

📋 Description

Asset Suite allows unauthenticated users to access PropertiesReloadServlet, CacheFlushServlet, MetadataCacheFlushServlet and ResourceBundleReloadServlet, which could result in denial-of-service conditions affecting application availability. These servlets are designed to perform specific functions within production environment depending on how the Asset Suite application is configured.

🔗 References (3)

https://nvd.nist.gov/vuln/detail/CVE-2026-11796
https://publisher.hitachienergy.com/preview?DocumentID=8DBD000254&LanguageCode=en&DocumentPartId=&Action=Launch
https://github.com/advisories/GHSA-rg9h-r7mc-w5vr