Vulnerabilities
Vulnerable Software

Vulnerability Details CVE-2026-120716

Insertion of sensitive information into sent data in the identity provider user synchronization in Devolutions Server 2026.3.13.0 and earlier allows an authenticated user with the delegated permission to update users from the identity provider to obtain other users' MFA secrets via the synchronization API response.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.003
EPSS Ranking 19.4%
CVSS Severity
CVSS v3 Score 6.5
Products affected by CVE-2026-120716


Contact Us

Shodan ® - All rights reserved