CVE-2026-2590
CVSS Score
9.8
EPSS Score
0.0%
EPSS Percentile
0th
Improper enforcement of the Disable password saving in vaults setting in the connection entry component in Devolutions Remote Desktop Manager 2025.3.30 and earlier allows an authenticated user to persist credentials in vault entries, potentially exposing sensitive information to other users, by creating or editing certain connection types while password saving is disabled.
| Vendor | devolutions |
| Product | remote desktop manager |
| Published | Mar 3, 2026 |
| Last Updated | Mar 4, 2026 |
Stay Ahead of the Next One
Get instant alerts for devolutions remote desktop manager
Be the first to know when new critical vulnerabilities affecting devolutions remote desktop manager are published — delivered to Slack, Telegram or Discord.
Get Free Alerts →
Free · No credit card · 60 sec setup
Affected Versions
Devolutions / Remote Desktop Manager
0 ≤ 2025.3.30