CVE-2026-126331

The Devolutions Server version 2026.3.13.0 and earlier is affected by a vulnerability where the user list endpoint improperly includes sensitive information in its response. This issue allows an authenticated user with delegated user-viewing permissions to retrieve API key secret hashes belonging...