CVE-2026-12162
CVSS Score
5.5
EPSS Score
0.0%
EPSS Percentile
0th
Improper host validation in the social login autofill feature in Devolutions Remote Desktop Manager 2026.2.8 allows an attacker to disclose stored social login credentials via a crafted web entry pointing to a provider lookalike domain.
| Vendor | devolutions |
| Product | remote desktop manager |
| Published | Jun 15, 2026 |
| Last Updated | Jun 16, 2026 |
Stay Ahead of the Next One
Get instant alerts for devolutions remote desktop manager
Be the first to know when new medium vulnerabilities affecting devolutions remote desktop manager are published — delivered to Slack, Telegram or Discord.
Get Free Alerts →
Free · No credit card · 60 sec setup
Affected Versions
Devolutions / Remote Desktop Manager
2026.2.0 ≤ 2026.2.8