CVE-2026-114487

Missing authorization in the PAM AD computer import endpoint in Devolutions Server 2026.3.5.0 through 2026.3.10.0 and 2026.2.20.0 and earlier allows an authenticated non-administrative user with a PAM license to create PAM sub-providers under existing AD providers via a crafted import request...

CVE-2026-114487

Missing authorization in the PAM AD computer import endpoint in Devolutions Server 2026.3.5.0 through 2026.3.10.0 and 2026.2.20.0 and earlier allows an authenticated non-administrative user with a PAM license to create PAM sub-providers under existing AD providers via a crafted import request...

CVE-2026-114487

The Devolutions Server versions 2026.3.5.0 through 2026.3.10.0 and 2026.2.20.0 and earlier are vulnerable to a missing authorization flaw (CWE-862) in the PAM AD computer import endpoint . This issue allows an authenticated non-administrative user with a PAM license to create PAM sub-providers un...

EUVD-2026-108223

Missing authorization in the PAM AD computer import endpoint in Devolutions Server 2026.3.5.0 through 2026.3.10.0 and 2026.2.20.0 and earlier allows an authenticated non-administrative user with a PAM license to create PAM sub-providers under existing AD providers via a crafted import request...

PT-2026-121412

Missing authorization in the PAM AD computer import endpoint in Devolutions Server 2026.3.5.0 through 2026.3.10.0 and 2026.2.20.0 and earlier allows an authenticated non-administrative user with a PAM license to create PAM sub-providers under existing AD providers via a crafted import request...

Devolutions Server authorization issue vulnerability

Versions Devolutions Server from 2026.3.5.0 through 2026.3.10.0 and versions 2026.2.20.0 and earlier contain an authorization issue vulnerability. This vulnerability stems from a lack of authorization on PAM AD computer import endpoints, allowing authenticated non-administrative users possessing...