CVE-2022-26964: Devolutions Remote Desktop Manager

High severity, CVSS 7.5. EPSS: 0.5% chance of exploitation in the next 30 days.

Weak password derivation for export in Devolutions Remote Desktop Manager before 2022.1 allows information disclosure via a password brute-force attack. An error caused base64 to be decoded.

Affected products

• Devolutions Remote Desktop Manager: before 2022.1 (fixed in 2022.1)

Published 2022-12-26. Last modified 2026-06-17.