UNKNOWN NVD

CVE-2026-120734

Cleartext transmission of sensitive information in the email configuration test in Devolutions Server 2026.3.13.0 and earlier allows an authenticated user with

Cleartext transmission of sensitive information in the email configuration test in Devolutions Server 2026.3.13.0 and earlier allows an authenticated user with access to the test action to obtain the stored SMTP password via a request that names an attacker-controlled SMTP host.

References

https://devolutions.net/security/advisories/DEVO-2026-0039/

Published: 2026-11-03 · Source: NVD · Feed updated: 2026-11-04

This unknown severity vulnerability was published on 2026-11-03 via NVD.

vulnfeed aggregates 18613 vulnerabilities from NVD, CISA KEV, Ubuntu, Debian, Red Hat, Kubernetes, Exploit-DB, OSS-Security, GitHub and OpenStack — updated every 4 hours.