UNKNOWNCVSS not yet scoredVulnerability
CVE-2026-121580
Server-side request forgery in the Jira ticketing filter lookup in Devolutions Server 2026.2.22.0 and earlier allows an authenticated low-privileged user to obtain the stored Jira service account credentials via an attacker-controlled server address in the request.
Properties
- Last source
- NVD
- Nvd fetched at
- 2026-11-03T21:24:30.963596+00:00
- Cve id
- CVE-2026-121580
- First seen by Signal
- 2026-11-03T21:21:12+00:00
- Retrieved at
- 2026-11-03T21:25:36+00:00
- Published at
- 2026-11-03T21:17:37.710
- Last modified
- 2026-11-03T21:17:37.817
Related Entities (1)
HAS_WEAKNESS (1)
Explore deeper with Ninja Signal's threat intelligence graph