Security
Loading…

CVE-2026-105488

HIGHCVSS 7.1
View on NVD← Back to search
Description

Missing authorization in the global vault in Devolutions Server 2026.3.7.0 and earlier allows an authenticated user with only the global vault view permission to modify and delete global contact and folder entries.

Timeline
Published:October 6th, 2026 7:17 PM
Last modified:October 7th, 2026 4:17 PM
CVSS Scoring

CVSS v3: 7.1 (HIGH)

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:H/A:N

Weaknesses (CWE)
CWE-862
References & Reports
Advisories, patches, and third-party reports

Source: NIST NVD · Data may lag official sources by up to one minute