UNKNOWNCVSS not yet scoredVulnerability
CVE-2026-126331
Insertion of sensitive information into sent data in the user list endpoint in Devolutions Server 2026.3.13.0 and earlier allows an authenticated user with delegated user-viewing permissions to obtain users' API key secret hashes via the user list API response.
Properties
- Last source
- NVD
- Nvd fetched at
- 2026-11-11T23:49:45.533241+00:00
- Cve id
- CVE-2026-126331
- First seen by Signal
- 2026-11-11T23:46:42+00:00
- Name
- CVE-2026-126331
- Retrieved at
- 2026-11-11T23:50:19+00:00
- Published at
- 2026-11-11T22:17:27.090
- Last modified
- 2026-11-11T22:17:27.180
Related Entities (1)
HAS_WEAKNESS (1)
Explore deeper with Ninja Signal's threat intelligence graph