EUVD-2026-123813

Insertion of sensitive information into sent data in the user endpoints in Devolutions Server 2026.3.13.0 and earlier allows an authenticated user with delegated user-viewing permissions to obtain users' MFA shared secrets via the user API responses...

CVE-2026-126328

Insertion of sensitive information into sent data in the user endpoints in Devolutions Server 2026.3.13.0 and earlier allows an authenticated user with delegated user-viewing permissions to obtain users' MFA shared secrets via the user API responses...

CVE-2026-126328

Insertion of sensitive information into sent data in the user endpoints in Devolutions Server 2026.3.13.0 and earlier allows an authenticated user with delegated user-viewing permissions to obtain users' MFA shared secrets via the user API responses...

CVE-2026-126328

The Devolutions Server versions 2026.3.13.0 and earlier are affected by a vulnerability where sensitive information is inserted into sent data within user endpoints. An authenticated user with delegated user-viewing permissions can exploit this to obtain users' MFA shared secrets through user API...

PT-2026-145452

Insertion of sensitive information into sent data in the user endpoints in Devolutions Server 2026.3.13.0 and earlier allows an authenticated user with delegated user-viewing permissions to obtain users' MFA shared secrets via the user API responses...

CVE-2026-126328: Devolutions Server: Insertion of sensitive information into sent data in the user endpoints in Devolutions Server 2026.3.13.0 and earlier…

Insertion of sensitive information into sent data in the user endpoints in Devolutions Server 2026.3.13.0 and earlier allows an authenticated user with delegated user-viewing permissions to obtain users' MFA shared secrets via the user API responses...