Medium severity6.5NVD Advisory· Published Jun 8, 2026· Updated Jun 12, 2026
CVE-2026-10786
CVE-2026-10786
Description
Improper access control in the ticketing integration settings in Devolutions Server allows an authenticated low-privileged user to obtain cleartext credentials for configured ticketing integrations via a crafted API request.
This issue affects :
- Devolutions Server 2026.2.4.0
- Devolutions Server 2026.1.20.0 and earlier
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected products
1- Range: <=2026.1.20.0, =2026.2.4.0
Patches
Vulnerability mechanics
References
1- devolutions.net/security/advisories/DEVO-2026-0015/nvdVendor Advisory
News mentions
1- Devolutions Server: Three Medium-Severity Flaws Disclosed TogetherVypr Intelligence · Jun 8, 2026