Threats tagged 'ghsa-5256-r6g6-4j2j'

1 threat

Severity	CVSS	Signals	Threat	Source	Published	Score and star
Medium	6.5	EPSS 0.3%	CVE-2026-90971Devolutions Server · Server-Side Request Forgery (SSRF) Medium6.5EPSS 0.3%2026-09-15GCVE DatabaseCVE-2026-90971 A Server-Side Request Forgery (SSRF) vulnerability exists in the VMware synchronization feature of Devolutions Server versions 2026.2.16 and earlier. This flaw allows a low-privileged authenticated user to access other users' credentials and reach internal or cloud-metadata network endpoints by submitting a crafted connection definition for datacenter discovery. EPSS 0.3%Report on CVE-2026-90971 Vulnerability CWE-863 #ghsa-5256-r6g6-4j2j	GCVE Database	2026-09-15

Page 1 of 1