Back to CVE List

CVE-2026-12161

Vulnerability Description

Improper input validation in the SSH Elevate Shell feature in
Devolutions Remote Desktop Manager 2026.2.7 allows an authenticated user
with permission to create or modify a shared SSH entry to execute
arbitrary commands on a remote SSH host using stored elevation
credentials via a crafted alternate username and user interaction with
the Elevate Shell action.

Vulnerability Details

Published Date
Last Modified
CWE ID
CWE-78
Source
NVD
Vendor
Devolutions
Product
Remote Desktop Manager

External References

Discussion (0)

Add Comment

No comments yet. Be the first!