CVE-2026-0747
Unknown Unknown - Not Provided
Sensitive Information Exposure in Devolutions RDM TeamViewer Dashboard

Publication date: 2026-01-08

Last updated on: 2026-01-08

Assigner: Devolutions Inc.

Description
Exposure of sensitive information in the TeamViewer entry dashboard component in Devolutions Remote Desktop Manager 2025.3.24.0 through 2025.3.28.0 on Windows allows an external observer to view a password on screen via a defective masking feature, for example during physical observation or screen sharing.
CVSS Scores
EPSS Scores
Probability:
Percentile:
Meta Information
Published
2026-01-08
Last Modified
2026-01-08
Generated
2026-06-16
AI Q&A
2026-01-08
EPSS Evaluated
2026-06-14
NVD
CVE-2026-0747
EUVD
EUVD-2026-1435
Affected Vendors & Products
Showing 1 associated CPE
Vendor Product Version / Range
devolutions remote_desktop_manager From 2025.3.24.0 (inc) to 2025.3.28.0 (inc)
Helpful Resources
Exploitability
CWE
CWE Icon
KEV
KEV Icon
CWE ID Description
CWE-200 The product exposes sensitive information to an actor that is not explicitly authorized to have access to that information.
Attack-Flow Graph
AI Quick Actions
Instant insights powered by AI
Executive Summary

This vulnerability is a flaw in the TeamViewer entry dashboard component of Devolutions Remote Desktop Manager versions 2025.3.24.0 through 2025.3.28.0 on Windows. It involves a defective password masking feature that exposes sensitive information by allowing an external observer to see passwords on screen. This exposure can occur during physical observation or screen sharing. [1]

Impact Analysis

The vulnerability can lead to unauthorized disclosure of passwords if someone physically observes your screen or views it via screen sharing. This exposure of sensitive credentials could potentially allow attackers or unauthorized individuals to gain access to systems or accounts protected by those passwords. [1]

Detection Guidance

This vulnerability can be detected by identifying if your system is running Devolutions Remote Desktop Manager versions 2025.3.24.0 through 2025.3.28.0 on Windows. There are no specific commands provided to detect the defective password masking feature or exposure on screen. [1]

Mitigation Strategies

To mitigate this vulnerability, immediately upgrade Devolutions Remote Desktop Manager to version 2025.3.29.0 or higher. [1]

Chat Assistant
Ask questions about this CVE
Hi! I’m here to help you understand CVE-2026-0747. Ask me anything about the vulnerability, its impact, or mitigation strategies.
0/70
EPSS Chart