CVE-2026-120734
UNKNOWN
NVD
CVSS Score
0
Severity
UNKNOWN
Published
Nov 03, 2026
Vendor
unknown
Description
Cleartext transmission of sensitive information in the email configuration test in Devolutions Server 2026.3.13.0 and earlier allows an authenticated user with access to the test action to obtain the stored SMTP password via a request that names an attacker-controlled SMTP host.