Question 1

What is CVE-2026-121580 — CVE-2026-121580?

Accepted Answer

Server-side request forgery in the Jira ticketing filter lookup in Devolutions Server 2026.2.22.0 and earlier allows an authenticated low-privileged user to obtain the stored Jira service account credentials via an attacker-controlled server address in the request.

Question 2

What is the authoritative source for CVE-2026-121580?

Accepted Answer

CVE-2026-121580 (CVE-2026-121580) is catalogued in NVD + CISA KEV + FIRST EPSS and curated for EU compliance use cases by SQUR.

CVE-2026-121580CVE-2026-121580

Description

Scoring