CVE-2026-12117
Improper access control in the social login connection endpoint in Devolutions Server 2026.2.5 allows an authenticated vault member to enumerate social login entry metadata to…
Published: 2026-06-16 · CVSS: 4.3 · CVSS 3.1
Improper access control in the social login connection endpoint in Devolutions Server 2026.2.5 allows an authenticated vault member to enumerate social login entry metadata to which they are not authorized via a crafted API request.
Source: CVE Program · Revision 8b16575c39f1e1810c5e863010da073d2d3285e7