CVE-2026-5175

The CVE-2026-5175 issue affects Devolutions Server and stems from improper access control in the MFA management API. An authenticated attacker can delete their own configured MFA factors, reducing account protection to password-only authentication via crafted HTTP requests. Affected versions are ...