CVE-2026-12161
Severity CVSS v4.0:
Pending analysis
Type:
CWE-78
OS Command Injections
Publication date:
16/06/2026
Last modified:
16/06/2026
Description
Improper input validation in the SSH Elevate Shell feature in <br />
Devolutions Remote Desktop Manager 2026.2.7 allows an authenticated user<br />
with permission to create or modify a shared SSH entry to execute <br />
arbitrary commands on a remote SSH host using stored elevation <br />
credentials via a crafted alternate username and user interaction with <br />
the Elevate Shell action.