Vulnerabilities
Vulnerable Software

Vulnerability Details CVE-2026-120715

Server-side request forgery in the Active Directory credential validation in Devolutions Server 2026.3.12.0 and earlier allows an authenticated low-privileged user to capture the NetNTLMv2 hash of the DVLS service account via an attacker-controlled domain name in the request.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.002
EPSS Ranking 16.2%
CVSS Severity
CVSS v3 Score 8.1
Products affected by CVE-2026-120715


Contact Us

Shodan ® - All rights reserved