CVE-2026-0747

Exposure of sensitive information in the TeamViewer entry dashboard component in Devolutions Remote Desktop Manager 2025.3.24.0 through 2025.3.28.0 on Windows allows an external observer to view a password on screen via a defective masking feature, for example during physical observation or screen sharing.

CVSS v3 3.3 LOW

3.3^/10

CVSS v3 : LOW

Vector :

Exploitability : 1.8 / Impact : 1.4

Attack Vector LOCAL

Attack Complexity LOW

Privileges Required NONE

User Interaction REQUIRED

Confidentiality Impact LOW

Integrity Impact NONE

Availability Impact NONE

Scope UNCHANGED

References

Link	Resource
https://devolutions.net/security/advisories/DEVO-2026-0002/	Broken Link Vendor Advisory

Configurations

Configuration 1 (hide)

cpe:2.3:a:devolutions:remote_desktop_manager:*:*:*:*:*:windows:*:*

History

26 Oct 2026, 22:10

Type	Values Removed	Values Added
Summary		(es) Exposición de información sensible en el componente del panel de entrada de TeamViewer en Devolutions Remote Desktop Manager desde la versión 2025.3.24.0 hasta la 2025.3.28.0 en Windows permite a un observador externo ver una contraseña en pantalla a través de una función de enmascaramiento defectuosa, por ejemplo, durante la observación física o el uso compartido de pantalla.

Information

Published : 2026-01-08 20:15

Updated : 2026-10-26 22:10

NVD link : CVE-2026-0747

Mitre link : CVE-2026-0747

CVE.ORG link : CVE-2026-0747

JSON object : View

Products Affected

devolutions

remote_desktop_manager

CWE

CWE-200

Exposure of Sensitive Information to an Unauthorized Actor

{"id": "CVE-2026-0747", "cveTags": [], "metrics": {"ssvcV203": [{"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "ssvcData": {"id": "CVE-2026-0747", "role": "CISA Coordinator", "options": [{"exploitation": "none"}, {"automatable": "no"}, {"technicalImpact": "partial"}], "version": "2.0.3", "timestamp": "2026-01-08T20:06:33.387229Z"}}], "cvssMetricV31": [{"type": "Secondary", "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "cvssData": {"scope": "UNCHANGED", "version": "3.1", "baseScore": 3.3, "attackVector": "LOCAL", "baseSeverity": "LOW", "vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N", "integrityImpact": "NONE", "userInteraction": "REQUIRED", "attackComplexity": "LOW", "availabilityImpact": "NONE", "privilegesRequired": "NONE", "confidentialityImpact": "LOW"}, "impactScore": 1.4, "exploitabilityScore": 1.8}]}, "affected": [{"source": "security@devolutions.net", "affectedData": [{"vendor": "Devolutions", "product": "Remote Desktop Manager", "versions": [{"status": "affected", "version": "2025.3.24.0", "versionType": "custom", "lessThanOrEqual": "2025.3.28.0"}], "defaultStatus": "unaffected"}]}], "published": "2026-01-08T20:15:44.927", "references": [{"url": "https://devolutions.net/security/advisories/DEVO-2026-0002/", "tags": ["Broken Link", "Vendor Advisory"], "source": "security@devolutions.net"}], "vulnStatus": "Analyzed", "weaknesses": [{"type": "Secondary", "source": "security@devolutions.net", "description": [{"lang": "en", "value": "CWE-200"}]}], "descriptions": [{"lang": "en", "value": "Exposure of sensitive information in the TeamViewer entry dashboard component in Devolutions Remote Desktop Manager 2025.3.24.0 through 2025.3.28.0 on Windows allows an external observer to view a password on screen via a defective masking feature, for example during physical observation or screen sharing."}, {"lang": "es", "value": "Exposici\u00f3n de informaci\u00f3n sensible en el componente del panel de entrada de TeamViewer en Devolutions Remote Desktop Manager desde la versi\u00f3n 2025.3.24.0 hasta la 2025.3.28.0 en Windows permite a un observador externo ver una contrase\u00f1a en pantalla a trav\u00e9s de una funci\u00f3n de enmascaramiento defectuosa, por ejemplo, durante la observaci\u00f3n f\u00edsica o el uso compartido de pantalla."}], "lastModified": "2026-10-26T22:10:00.163", "configurations": [{"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:a:devolutions:remote_desktop_manager:*:*:*:*:*:windows:*:*", "vulnerable": true, "matchCriteriaId": "7F4399A3-8778-4568-80C0-39E152DBBB9D", "versionEndExcluding": "2025.3.29.0", "versionStartIncluding": "2025.3.24.0"}], "operator": "OR"}]}], "sourceIdentifier": "security@devolutions.net"}