EUVD-2026-37202

Improper access control in the social login connection endpoint in Devolutions Server 2026.2.5 allows an authenticated vault member to enumerate social login entry metadata to which they are not authorized via a crafted API request...

CVE-2026-12117

Improper access control in the social login connection endpoint in Devolutions Server 2026.2.5 allows an authenticated vault member to enumerate social login entry metadata to which they are not authorized via a crafted API request...

CVE-2026-12117

CVE-2026-12117 affects Devolutions Server 2026.2.5: a flaw in the social login connection endpoint enables an authenticated vault member to enumerate social login entry metadata to which they are not authorized via a crafted API request. The provided documents do not include exploitation steps or...