Threats tagged 'ghsa-q356-q6m4-g949'

1 threat

Severity	CVSS	Threat	Source	Published	Score and star
High	–	CVE-2026-126331Insertion of sensitive information into sent data in the user list endpoint in Devolutions Server 2026.3.13.0 and High2026-11-12GCVE DatabaseCVE-2026-126331 An authenticated user with delegated user-viewing permissions in Devolutions Server 2026.3.13.0 and earlier can obtain users' API key secret hashes via the user list API response due to insertion of sensitive information into sent data in the user list endpoint. Report on CVE-2026-126331 Vulnerability CWE-201 #ghsa-q356-q6m4-g949	GCVE Database	2026-11-12

Page 1 of 1