Threats tagged 'ghsa-jfr4-c54f-fr2v'

1 threat

Severity	CVSS	Threat	Source	Published	Score and star
High	–	CVE-2026-126328Insertion of sensitive information into sent data in the user endpoints in Devolutions Server 2026.3.13.0 and earlier High2026-11-12GCVE DatabaseCVE-2026-126328 Devolutions Server versions 2026.3.13.0 and earlier contain a vulnerability where sensitive information, specifically users' MFA shared secrets, can be inserted into data sent by user endpoints. This allows an authenticated user with delegated user-viewing permissions to access these secrets via the user API responses. Report on CVE-2026-126328 Vulnerability CWE-312 #ghsa-jfr4-c54f-fr2v	GCVE Database	2026-11-12

Page 1 of 1