Improper host validation in the social login autofill feature in Devolutions Remote Desktop Manager 2026.2.8 allows an attacker to disclose stored social login credentials via a crafted web entry pointing to a provider lookalike domain.
History

Tue, 16 Jun 2026 06:30:00 +0000

Type Values Removed Values Added
First Time appeared Devolutions
Devolutions remote Desktop Manager
Vendors & Products Devolutions
Devolutions remote Desktop Manager

Tue, 16 Jun 2026 00:45:00 +0000

Type Values Removed Values Added
Description Improper host validation in the social login autofill feature in Devolutions Remote Desktop Manager 2026.2.8 allows an attacker to disclose stored social login credentials via a crafted web entry pointing to a provider lookalike domain.
References

cve-icon MITRE

Status: PUBLISHED

Assigner: DEVOLUTIONS

Published:

Updated: 2026-06-15T23:57:40.218Z

Reserved: 2026-06-12T19:19:57.058Z

Link: CVE-2026-12162

cve-icon Vulnrichment

No data.

cve-icon NVD

Status : Received

Published: 2026-06-16T01:16:23.937

Modified: 2026-06-16T01:16:23.937

Link: CVE-2026-12162

cve-icon Redhat

No data.

cve-icon OpenCVE Enrichment

Updated: 2026-06-16T02:15:03Z