{"id":"CVE-2026-120733","published":"2026-11-03T21:17:04.547","lastModified":"2026-11-03T21:17:04.640","description":"Cleartext storage of sensitive information in the user account data in Devolutions Server 2026.3.12.0 and earlier allows an attacker with read access to the database or a database backup to obtain users' TOTP shared secrets via the unencrypted copy of the security key written when an administrator saves a user.","cvssScore":null,"cvssSeverity":null,"cvssVector":null,"cwes":["CWE-312"],"vendors":[],"products":[],"references":[{"url":"https://devolutions.net/security/advisories/DEVO-2026-0039/","tags":[]}],"exploitRefs":[],"hasPoc":false,"ai":null}