What is GHSA-v69h-c25q-f3jf?

GHSA-v69h-c25q-f3jf is a security advisory published by GitHub Security Advisories with High severity. Cleartext Transmission of Sensitive Information vulnerability in rustdesk-server-pro RustDesk...

Which CVE IDs does GHSA-v69h-c25q-f3jf cover?

GHSA-v69h-c25q-f3jf covers the following CVE IDs: CVE-2026-30796. Each CVE has its own detail page on EchelonGraph Pulse with the synthesized EG score.

What is the CVSS v3 score of GHSA-v69h-c25q-f3jf?

GHSA-v69h-c25q-f3jf has a CVSS v3 base score of 7.5, published by GitHub Security Advisories.

GHSA-v69h-c25q-f3jfHighCVSS 7.5

Cleartext Transmission of Sensitive Information vulnerability in rustdesk-server-pro RustDesk...

Vendor

GitHub Security Advisories

Published

March 5, 2026

Last Modified

June 22, 2026

🔗 CVE IDs covered (1)

CVE-2026-30796 →

📋 Description

Cleartext Transmission of Sensitive Information vulnerability in rustdesk-server-pro RustDesk Server Pro rustdesk-server-pro on Windows, MacOS, Linux (Address book sync API modules) allows Sniffing Attacks. This vulnerability is associated with program files Closed source — API endpoint handling heartbeat sync and program routines Heartbeat API handler (accepts preset-address-book-password in plaintext).

This issue affects RustDesk Server Pro: through 1.7.5.

🔗 References (5)

https://nvd.nist.gov/vuln/detail/CVE-2026-30796
https://rustdesk.com/docs/en
https://docs.google.com/document/d/e/2PACX-1vSds6jjpd38oO_yIAyd1HYtKNUuea-I-ozAPpGhYI7QgAU-QGJ7D8a4rOZVj1vmiUXV1EcdRHf9aZAW/pub
https://www.vulsec.org
https://github.com/advisories/GHSA-v69h-c25q-f3jf