Vulnerability in Devolutions Remote Desktop Manager
CVE-2026-12162
Improper host validation in the social login autofill feature in Devolutions Remote Desktop Manager 2026.2.8 allows an attacker to disclose stored social login credentials via a crafted web entry pointing to a provider lookalike domain.
CVSS v3 metric
CVSS v3 base score 5.5 (Medium). Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:L/I:L/A:L.
Affected products
- Devolutions Remote Desktop Manager — versions 2026.2.0
Weakness classification (CWE)
References
Frequently asked questions
- What is CVE-2026-12162?
- CVE-2026-12162 is a medium-severity vulnerability in Devolutions Remote Desktop Manager, classified under Improper Validation of Certificate with Host Mismatch. CVSS score: 5.5/10. Published 2026-06-16.
- How severe is CVE-2026-12162?
- Medium severity. CVSS v3 base score is 5.5 out of 10.