CVE-2026-12162

MEDIUM CVSS 5.5 View on NVD ↗

Description

Improper host validation in the social login autofill feature in Devolutions Remote Desktop Manager 2026.2.8 allows an attacker to disclose stored social login credentials via a crafted web entry pointing to a provider lookalike domain.

CVSS Vector

CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:L/I:L/A:L

Affected Products

devolutions/remote_desktop_manager

References

https://devolutions.net/security/advisories/DEVO-2026-0018/

Published: Jun 16, 2026 01:16 UTC Modified: Jun 16, 2026 20:33 UTC