Skip to content
CVE PROGRAM SOURCE RECORD4.3 Medium

CVE-2026-11890

Improper access control in PAM account discovery results in Devolutions

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
DEVOLUTIONS

Description

Improper access control in PAM account discovery results in Devolutions Server 2026.2.5, 2026.1.21 allows an authenticated user to retrieve account discovery scan results.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Devolutions Devolutions Server

Default version status: unaffected

  • 0 to < 2026.2.5affected
  • 0 to < 2026.1.21affected

References