CVE-2026-100288EPSS p0.0%

CVE-2026-100288CVE-2026-100288

Description

Cleartext storage of sensitive information in the database in Devolutions Server 2026.3.5.0 and earlier allows an attacker with read access to the database to obtain external identity provider tokens and active session identifiers via direct inspection of stored records.

Scoring

CVSS 7.2 ()
VectorCVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:C/C:H/I:H/A:N
EPSS0.07% probability of exploitation · percentile 0.0% · 2026-10-03T12:00:21Z
Last modified2026-09-30
Sourced from NVD + FIRST.org EPSS. Curated for EU compliance use cases by Adam Lundqvist, Founder at SQUR.