PT-2026-145453

CVE-2026-126331

·

Published

2026-11-11

·

Updated

2026-11-11

Description by

Score
N/A
Not available

No severity ratings or metrics are available. When they are, we'll update the corresponding info on the page.

Insertion of sensitive information into sent data in the user list endpoint in Devolutions Server 2026.3.13.0 and earlier allows an authenticated user with delegated user-viewing permissions to obtain users' API key secret hashes via the user list API response.
Vendors
Affected products
Weakness enumeration
CWE-201: Insertion of Sensitive Information Into Sent Data
Related identifiers
CVE-2026-126331
Found an issue in the description? Have something to add? Feel free to write us 👾
dbugs@ptsecurity.com