CyberRota Analysis
This is a low severity vulnerability with a CVSS score of 2.7. See the original NVD description below for full technical details.
CVE
CVE-2026-12755
Severity
LOW
CVSS
2.7
EPSS
0.22%
Original NVD Description
Improper input validation in the PAM AD discovery endpoints in Devolutions Server 2026.2.4.0 through 2026.2.7.0 allows an authenticated user with the UserGroupsView permission to coerce server-side authentication to an attacker-controlled host, exposing PAM provider credentials as a NTLMv2 challenge-response, via a crafted DomainName parameter.
Related CVEs
Other vulnerabilities affecting the same vendor(s)