UNKNOWNCVSS not yet scoredVulnerability
CVE-2026-120715
Server-side request forgery in the Active Directory credential validation in Devolutions Server 2026.3.12.0 and earlier allows an authenticated low-privileged user to capture the NetNTLMv2 hash of the DVLS service account via an attacker-controlled domain name in the request.
Properties
- Last source
- NVD
- Nvd fetched at
- 2026-11-03T21:24:30.963596+00:00
- Cve id
- CVE-2026-120715
- First seen by Signal
- 2026-11-03T21:21:12+00:00
- Retrieved at
- 2026-11-03T21:25:36+00:00
- Published at
- 2026-11-03T21:17:04.270
- Last modified
- 2026-11-03T21:17:04.377
Related Entities (1)
HAS_WEAKNESS (1)
Explore deeper with Ninja Signal's threat intelligence graph