EUVD-2026-116492

Cleartext transmission of sensitive information in the email configuration test in Devolutions Server 2026.3.13.0 and earlier allows an authenticated user with access to the test action to obtain the stored SMTP password via a request that names an attacker-controlled SMTP host...

CVE-2026-120734

The Devolutions Server (version 2026.3.13.0 and earlier) is vulnerable to the cleartext transmission of sensitive information during the email configuration test . An authenticated user with access to the test action can obtain a stored SMTP password by initiating a request that specifies an atta...