Devolutions Remote Desktop Manager < 2025.3.32 / 2026.1 < 2026.1.6 Sensitive Information Exposure (DEVO-2026-0005)

The version of Devolutions Remote Desktop Manager installed on the remote host is prior to 2025.3.32 or 2026.1 prior to 2026.1.6. It is, therefore, affected by a sensitive information exposure vulnerability: - Improper enforcement of the Disable password saving in vaults setting in the connection...

CVE-2026-2590

creationtimestamp| type| source ---|---|--- 2026-03-03 23:48:58+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mg6xggot7p2e 2026-03-04 16:21:12+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mgaoup5rdc2c 2026-03-04 16:22:16+00:00| seen|...

CVE-2026-2590

Improper enforcement of the Disable password saving in vaults setting in the connection entry component in Devolutions Remote Desktop Manager 2025.3.30 and earlier allows an authenticated user to persist credentials in vault entries, potentially exposing sensitive information to other users, by...

CVE-2026-2590

Devolutions Remote Desktop Manager versions 2025.3.30 and earlier (and versions prior to 2026.1.6 ) are vulnerable to a sensitive information exposure flaw. The connection entry component fails to properly enforce the "Disable password saving in vaults" setting. This allows an authenticated user ...