UNKNOWN NVD

CVE-2026-120716

Insertion of sensitive information into sent data in the identity provider user synchronization in Devolutions Server 2026.3.13.0 and earlier allows an authenti

Insertion of sensitive information into sent data in the identity provider user synchronization in Devolutions Server 2026.3.13.0 and earlier allows an authenticated user with the delegated permission to update users from the identity provider to obtain other users' MFA secrets via the synchronization API response.

References

https://devolutions.net/security/advisories/DEVO-2026-0039/

Published: 2026-11-03 · Source: NVD · Feed updated: 2026-11-04

This unknown severity vulnerability was published on 2026-11-03 via NVD.

vulnfeed aggregates 18613 vulnerabilities from NVD, CISA KEV, Ubuntu, Debian, Red Hat, Kubernetes, Exploit-DB, OSS-Security, GitHub and OpenStack — updated every 4 hours.