CVE-2026-120733

The record

Cleartext storage of sensitive information in the user account data in Devolutions Server 2026.3.12.0 and earlier allows an attacker with read access to the database or a database backup to obtain users' TOTP shared secrets via the unencrypted copy of the security key written when an administrator saves a user.

Affected packages

Related vulnerabilities

• CVE-2026-114217 A flaw was found in konflux-ci. CWE-312
• CVE-2026-110200 IBM Langflow OSS 1.0.0 through 1.12.4 could allow a remote authenticated attacker to… CWE-312
• CVE-2026-116691 MLflow is an open source AI engineering platform for agents, large language models, and… CWE-312
• CVE-2026-115400 crawlseo before version 0.2.5 contains a cleartext storage vulnerability that allows… CWE-312
• CVE-2026-96293 A cleartext storage of sensitive information vulnerability in WatchGuard Endpoint… CWE-312
• CVE-2026-114223 NT OneAPP developed by NewType Infortech has an Exposure of Sensitive Information… CWE-312
• CVE-2026-77564 Talos Linux is a Linux distribution built for Kubernetes deployments. CWE-312
• CVE-2026-86280 A vulnerability was identified in SourceCodester Syllabus-Aligned Learning Management &… CWE-312