CVE-2026-0747
LOWDevolutions Remote Desktop Manager 2025.3.24.0-2025.3.28.0 Sensitive Information Exposure
Title source: llmDescription
Exposure of sensitive information in the TeamViewer entry dashboard component in Devolutions Remote Desktop Manager 2025.3.24.0 through 2025.3.28.0 on Windows allows an external observer to view a password on screen via a defective masking feature, for example during physical observation or screen sharing.
References (1)
Core 1
Core References
Vendor Advisory, Broken Link
https://devolutions.net/security/advisories/DEVO-2026-0002/
Scores
CVSS v3
3.3
EPSS
0.0018
EPSS Percentile
7.6%
Attack Vector
LOCAL
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N
CISA SSVC
Vulnrichment
Exploitation
none
Automatable
no
Technical Impact
partial
Details
CWE
CWE-200
Status
published
Products (1)
devolutions/remote_desktop_manager
2025.3.24.0 - 2025.3.29.0
Published
Jan 08, 2026
Tracked Since
Feb 18, 2026