CVE-2026-12161 – Devolutions Remote Desktop Manager SSH Elevation Command Injection

CVE ID :CVE-2026-12161

Published : June 16, 2026, 1:16 a.m. | 25 minutes ago

Description :Improper input validation in the SSH Elevate Shell feature in
Devolutions Remote Desktop Manager 2026.2.7 allows an authenticated user
with permission to create or modify a shared SSH entry to execute
arbitrary commands on a remote SSH host using stored elevation
credentials via a crafted alternate username and user interaction with
the Elevate Shell action.

Severity: 0.0 | NA

Visit the link for more details, such as CVSS details, affected products, timeline, and more…