Improper Host Validation in Devolutions Remote Desktop Manager
CVE-2026-12162

5.5MEDIUM

Key Information:

Vendor

Devolutions

Status
Remote Desktop Manager
Vendor
CVE Published:
15 June 2026

What is CVE-2026-12162?

An improper host validation flaw exists in the social login autofill feature of Devolutions Remote Desktop Manager version 2026.2.8. This vulnerability can be exploited by an attacker to reveal stored social login credentials through a malicious web entry that mimics a legitimate provider's domain, potentially compromising user accounts.

Affected Version(s)

Remote Desktop Manager 2026.2.0 <= 2026.2.8

References

https://devolutions.net/security/advisories/DEVO-2026-0018/

CVSS V3.1

Score:
5.5
Severity:
MEDIUM
Confidentiality:
Low
Integrity:
Low
Availability:
Low
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
Low
User Interaction:
Required
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.