Skip to content
Threat Feed
Subscribe

CPE

Cpe:2.3:a:devolutions:devolutions_server:*:*:*:*:*:*:*:*

2 briefs RSS
high advisory

Devolutions Server: Cleartext storage of TOTP shared secrets (CVE-2026-120733)

Devolutions Server versions 2026.3.12.0 and earlier store TOTP shared secrets in cleartext, allowing an attacker with database access to extract secrets and compromise MFA.

Devolutions Server
1t 1c
high advisory

Devolutions Server: Active Directory credential validation SSRF (CVE-2026-120715)

An authenticated low-privileged user can exploit a server-side request forgery (SSRF) vulnerability in Devolutions Server 2026.3.12.0 and earlier to capture the NetNTLMv2 hash of the service account.

Devolutions Server
1t 1c