EUVD-2026-123815

Improper access control in the administrative role assignment endpoint in Devolutions Server 2026.3.13.0 and earlier allows an authenticated user with only vault assignment management rights to escalate privileges and read vault entry passwords via a crafted role assignment request...

CVE-2026-126326

Improper access control in the administrative role assignment endpoint in Devolutions Server 2026.3.13.0 and earlier allows an authenticated user with only vault assignment management rights to escalate privileges and read vault entry passwords via a crafted role assignment request...

CVE-2026-126326

An improper access control vulnerability exists in the administrative role assignment endpoint of Devolutions Server versions 2026.3.13.0 and earlier . An authenticated user possessing only vault assignment management rights can perform a crafted role assignment request to escalate privileges and...

CVE-2026-126326

Improper access control in the administrative role assignment endpoint in Devolutions Server 2026.3.13.0 and earlier allows an authenticated user with only vault assignment management rights to escalate privileges and read vault entry passwords via a crafted role assignment request...

PT-2026-145523

Improper access control in the administrative role assignment endpoint in Devolutions Server 2026.3.13.0 and earlier allows an authenticated user with only vault assignment management rights to escalate privileges and read vault entry passwords via a crafted role assignment request...

CVE-2026-126326: Devolutions Server: Improper access control in the administrative role assignment endpoint in Devolutions Server 2026.3.13.0 and earlier…

Improper access control in the administrative role assignment endpoint in Devolutions Server 2026.3.13.0 and earlier allows an authenticated user with only vault assignment management rights to escalate privileges and read vault entry passwords via a crafted role assignment request...