Devolutions Remote Desktop Manager < 2025.3.32 / 2026.1 < 2026.1.6 Sensitive Information Exposure (DEVO-2026-0005)

The version of Devolutions Remote Desktop Manager installed on the remote host is prior to 2025.3.32 or 2026.1 prior to 2026.1.6. It is, therefore, affected by a sensitive information exposure vulnerability: - Improper enforcement of the Disable password saving in vaults setting in the connection...

CVE-2026-2590

creationtimestamp| type| source ---|---|--- 2026-03-03 23:48:58+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mg6xggot7p2e 2026-03-04 16:21:12+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mgaoup5rdc2c 2026-03-04 16:22:16+00:00| seen|...

CVE-2026-2590

Improper enforcement of the Disable password saving in vaults setting in the connection entry component in Devolutions Remote Desktop Manager 2025.3.30 and earlier allows an authenticated user to persist credentials in vault entries, potentially exposing sensitive information to other users, by...

CVE-2026-2590

CVE-2026-2590 affects Devolutions Remote Desktop Manager up to version 2025.3.30. The issue is improper enforcement of the Disable password saving in vaults setting in the connection entry component, allowing an authenticated user to persist credentials in vault entries by creating or editing cer...