Low severity2.6NVD Advisory· Published Oct 16, 2026· Updated Oct 16, 2026
CVE-2026-110805
CVE-2026-110805
Description
Server-side request forgery in PingOne groups endpoint in Devolutions Server 2026.3.8.0 and earlier allows an authenticated low-privileged user to exfiltrate the stored PingOne application secret via an attacker-controlled PingOne configuration in the request parameter.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected products
1- Range: <=2026.3.8.0
Patches
Vulnerability mechanics
References
1News mentions
0No linked articles in our index yet.