Unrated severityNVD Advisory· Published Nov 3, 2026· Updated Nov 3, 2026
CVE-2026-120734
CVE-2026-120734
Description
Cleartext transmission of sensitive information in the email configuration test in Devolutions Server 2026.3.13.0 and earlier allows an authenticated user with access to the test action to obtain the stored SMTP password via a request that names an attacker-controlled SMTP host.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected products
1- Range: <=2026.3.13.0
Patches
Vulnerability mechanics
References
1News mentions
0No linked articles in our index yet.