What is GHSA-vrv2-qxr4-vjpx?

GHSA-vrv2-qxr4-vjpx is a security advisory published by GitHub Security Advisories with Medium severity. mH-DEVELOPER smart home module sends its web interface and API traffic over unencrypted HTTP....

Which CVE IDs does GHSA-vrv2-qxr4-vjpx cover?

GHSA-vrv2-qxr4-vjpx covers the following CVE IDs: CVE-2026-82933. Each CVE has its own detail page on EchelonGraph Pulse with the synthesized EG score.

GHSA-vrv2-qxr4-vjpxMedium

mH-DEVELOPER smart home module sends its web interface and API traffic over unencrypted HTTP....

Vendor

GitHub Security Advisories

Published

September 28, 2026

Last Modified

September 28, 2026

🔗 CVE IDs covered (1)

CVE-2026-82933 →

📋 Description

mH-DEVELOPER smart home module sends its web interface and API traffic over unencrypted HTTP. Passwords, authentication tokens, and device commands are transmitted in cleartext. An attacker on the same network can intercept this traffic, steal credentials and tokens, and hijack sessions.

This issue was fixed in version 3.0.30

🔗 References (4)

https://nvd.nist.gov/vuln/detail/CVE-2026-82933
https://cert.pl/posts/2026/09/CVE-2026-82928
https://www.fif.com.pl/pl/strona-glowna/1367-mh-developer.html
https://github.com/advisories/GHSA-vrv2-qxr4-vjpx