CVE-2026-12162
Severity CVSS v4.0:
Pending analysis
Type:
Unavailable / Other
Publication date:
16/06/2026
Last modified:
16/06/2026
Description
Improper host validation in the social login autofill feature in <br />
Devolutions Remote Desktop Manager 2026.2.8 allows an attacker to <br />
disclose stored social login credentials via a crafted web entry <br />
pointing to a provider lookalike domain.