CVE-2026-10786
MEDIUM
NVD
CVSS Score
6.5
Severity
MEDIUM
Published
Jun 08, 2026
Vendor
unknown
Description
Improper access control in the ticketing integration settings in Devolutions Server allows an authenticated low-privileged user to obtain cleartext credentials for configured ticketing integrations via a crafted API request. This issue affects : * Devolutions Server 2026.2.4.0 * Devolutions Server 2026.1.20.0 and earlier