UNKNOWNCVSS not yet scoredVulnerability
CVE-2026-126328
Insertion of sensitive information into sent data in the user endpoints in Devolutions Server 2026.3.13.0 and earlier allows an authenticated user with delegated user-viewing permissions to obtain users' MFA shared secrets via the user API responses.
Properties
- Last source
- NVD
- Nvd fetched at
- 2026-11-11T23:49:45.533241+00:00
- Cve id
- CVE-2026-126328
- First seen by Signal
- 2026-11-11T23:46:42+00:00
- Name
- CVE-2026-126328
- Retrieved at
- 2026-11-11T23:50:19+00:00
- Published at
- 2026-11-11T22:17:26.950
- Last modified
- 2026-11-11T22:17:27.060
Related Entities (1)
HAS_WEAKNESS (1)
Explore deeper with Ninja Signal's threat intelligence graph