UNKNOWNCVSS not yet scoredVulnerability
CVE-2026-120733
Cleartext storage of sensitive information in the user account data in Devolutions Server 2026.3.12.0 and earlier allows an attacker with read access to the database or a database backup to obtain users' TOTP shared secrets via the unencrypted copy of the security key written when an administrator saves a user.
Properties
- Last source
- NVD
- Nvd fetched at
- 2026-11-03T21:24:30.963596+00:00
- Cve id
- CVE-2026-120733
- First seen by Signal
- 2026-11-03T21:21:12+00:00
- Retrieved at
- 2026-11-03T21:25:36+00:00
- Published at
- 2026-11-03T21:17:04.547
- Last modified
- 2026-11-03T21:17:04.640
Related Entities (1)
HAS_WEAKNESS (1)
Explore deeper with Ninja Signal's threat intelligence graph