CVE-2026-12162 — Devolutions / Remote Desktop Manager

CVE-2026-12162

Devolutions / Remote Desktop Manager PUBLISHED

Description (CNA)

Improper host validation in the social login autofill feature in Devolutions Remote Desktop Manager 2026.2.8 allows an attacker to disclose stored social login credentials via a crafted web entry pointing to a provider lookalike domain.

Affected (CNA)

Vendor / product	Versions
Devolutions / Remote Desktop Manager	affected 2026.2.0 through 2026.2.8

CWE

No CWE identifiers supplied.

References

https://devolutions.net/security/advisories/DEVO-2026-0018/

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.