CyberRota
← Ana sayfaya dön

CVE-2026-12755

LOW · CVSS 2.7 EPSS %0.22

Kaynak: NVD + CISA KEV + EPSS · Yayınlanma: 2026-06-25T14:16:36.333 · Çekilme zamanı: 2026-06-30T18:33:35.537650+00:00

CyberRota Yorumu

Detaylı analiz gerekiyor.

CVE
CVE-2026-12755
Severity
LOW
CVSS
2.7
EPSS
%0.22

Orijinal NVD Açıklaması

Improper input validation in the PAM AD discovery endpoints in Devolutions Server 2026.2.4.0 through 2026.2.7.0 allows an authenticated user with the UserGroupsView permission to coerce server-side authentication to an attacker-controlled host, exposing PAM provider credentials as a NTLMv2 challenge-response, via a crafted DomainName parameter.