medium5.5
CVE-2026-12162
Improper host validation in the social login autofill feature in Devolutions Remote Desktop Manager 2026.2.8 allows an attacker to disclose stored social login…
Impact
Improper host validation in the social login autofill feature in Devolutions Remote Desktop Manager 2026.2.8 allows an attacker to disclose stored social login credentials via a crafted web entry pointing to a provider lookalike domain.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Devolutions | Remote Desktop Manager | before 2026.2.9.0 |