CVE-2026-10786
Severity CVSS v4.0:
Pending analysis
Type:
CWE-312
Cleartext Storage of Sensitive Information
Publication date:
08/06/2026
Last modified:
08/06/2026
Description
Improper access control in the ticketing integration settings in Devolutions Server allows an authenticated low-privileged user to obtain cleartext credentials for configured ticketing integrations via a crafted API request.<br />
<br />
This issue affects :<br />
<br />
* Devolutions Server 2026.2.4.0<br />
* Devolutions Server 2026.1.20.0 and earlier