← Database

CVE-2026-126331

N/A CVSS: N/A Published: 2026-11-11 Modified: 2026-11-11

Description

Insertion of sensitive information into sent data in the user list endpoint in Devolutions Server 2026.3.13.0 and earlier allows an authenticated user with delegated user-viewing permissions to obtain users' API key secret hashes via the user list API response.

Affected Platforms

Unknown

Weakness Type

CWE-201

References