CVE-2026-9047

creationtimestamp| type| source ---|---|--- 2026-05-22 16:46:40+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mmhf4xkwxt2n 2026-06-06 11:02:52+00:00| seen| https://bsky.app/profile/keiwork35.bsky.social/post/3mnmivyhkac2z...

CVE-2026-9047

The Devolutions Server versions 2026.1.6.0 through 2026.1.16.0 are vulnerable to an authentication bypass. The root cause is the improper handling of factor key state within the multi-factor authentication management feature. An attacker possessing a user's password can bypass the multi-factor au...