CVE-2026-10786

6th percentile - higher than 6% of all known CVEs

Improper access control in the ticketing integration settings in Devolutions Server allows an authenticated low-privileged user to obtain cleartext credentials for configured ticketing integrations via a crafted API request.

The organization may be exposed to the leakage of sensitive data, potentially leading to further attacks on systems and resources. Low-privileged users could gain access to sensitive information, increasing the risk of security breaches.

It is recommended to update Devolutions Server to the latest version to mitigate this vulnerability. Additionally, conduct a user privilege audit and monitor API requests for potential abuse.