VulnSocial

CVE-2026-12161Disclosure(devolutions / remote_desktop_manager)

LOWCVSS 8.8 · HIGH

Signal is active with 1 mentions in latest observed window

Immediate actions

  • Patch devolutions remote_desktop_manager systems immediately

Recommended action window: Monitor and triage in normal cycle

NVD description

Improper input validation in the SSH Elevate Shell feature allows an authenticated user with permission to create or modify a shared SSH entry to execute arbitrary commands on a remote SSH host using stored elevation credentials via a crafted alternate username and user interaction with the Elevate Shell action. This affects  :  - Remote Desktop Manager 2026.2.5.0 through 2026.2.7.0 - Remote Desktop Manager 2026.1.23.0 and earlier

devolutions CVEsBack to dashboard
0.5/ 10 priority

Sources & remediation

Vendor / third-party advisories
Weakness type (CWE)
CWE-78

Priority

LOW

Exploitation

NONE

PoC

NONE

Patch

AVAILABLE

Momentum

STABLE

Are you affected?

If you run products in this scope, you should treat this CVE as relevant to your environment.

  • remote_desktop_manager

Threat summary

  • Patch or workaround signal is available
  • 3 mentions across 3 observed days
  • Momentum state: stable

What's happening

  • Patch or workaround mentioned in 2 signals
  • Technical details provided in 3 signals
  • Disclosure: 3 classified signals
  • Peaked 2d ago at 1 mentions (2026-06-16); latest day: 1
  • 3 total mentions across 3 days

Affected systems

Vendors
devolutions
Products
remote_desktop_manager

Deep dive

Activity timeline3 mentions / 3d
00111Mentions · 2026-06-16: 1Mentions · 2026-06-17: 1Mentions · 2026-07-20: 1Patch / Workaround · 2026-06-17: 1Patch / Workaround · 2026-07-20: 1Technical Details · 2026-06-16: 1Technical Details · 2026-06-17: 1Technical Details · 2026-07-20: 106-1606-1707-20
Signal classification1 categories
Disclosure
3100.0%
Referenced assets3 URLs
Full discourse3 posts
  • DFIR Lab@DFIR_Lab
    Disclosure

    🚨 HIGH severity CVE-2026-12161 (CVSS 8.8) affects Remote Desktop Manager. Authenticated attackers can execute arbitrary commands on remote SSH hosts via crafted usernames in SSH Elevate Shell feature. Patch immediately. #CVE #Vulnerability #PatchNow https://t.co/8mnaVV1qzR

    Post summary

    The tweet announces a newly disclosed CVE-2026-12161 with high severity, highlights the vulnerability mechanism, and urges users to apply the patch immediately.

    0000029
    88 followersView on X
  • ADK Cyber@ADKCyber
    Disclosure

    CVE-2026-12161 (CVSS 8.8) affects Devolutions Remote Desktop Manager 2026.2.7 SSH feature. Review and patch if using this version. https://nvd.nist.gov/vuln/detail/CVE-2026-12161 http://adkcyber.com via NVD Recent High CVSS #CyberSecurity #InfoSec #Vulnerability #AI #MachineLearning https://t.co/NVfPs5t33E

    Post summary

    The post announces CVE-2026-12161 with its CVSS score, affected version, and a patch recommendation, but provides no PoC, exploit code, or evidence of active exploitation.

    0000047
    91 followersView on X
  • Vulmon Vulnerability Feed@VulmonFeeds
    Disclosure

    CVE-2026-12161 Command Injection in Devolutions Remote Desktop Manager 2026.2.7 SSH Elevate Shell https://vulmon.com/vulnerabilitydetails?qid=CVE-2026-12161

    Post summary

    The text announces CVE-2026-12161, a command‑injection vulnerability in Devolutions Remote Desktop Manager 2026.2.7 that can elevate SSH shell privileges, without providing PoC, exploit code, active exploitation, or patch details.

    0000053
    4.0K followersView on X
CPE platform detail1 entries

1 of 1 entries

PartVendorProductVersionTarget SWTarget HW
Appdevolutionsremote_desktop_manager-windows-

Explore more

Back to dashboarddevolutions CVEsremote_desktop_manager vulnerabilities