EUVD-2026-37203

Improper access control in Devolutions Server 2026.2.5, 2026.1.21 allows an authenticated user to access attachments via folder duplication with inherited permissions...

CVE-2026-12105

Improper access control in Devolutions Server 2026.2.5, 2026.1.21 allows an authenticated user to access attachments via folder duplication with inherited permissions...

CVE-2026-12105

Devolutions Server 2026.2.5 and 2026.1.21 are affected by an improper access control vulnerability. An authenticated user can access attachments via folder duplication with inherited permissions, enabling unauthorized disclosure of attachments. Root cause: flawed access control logic. Affected so...