Lucene search
+L

13 matches found

RedhatCVE
RedhatCVE
•added 2026/06/05 7:47 p.m.•22 views

CVE-2026-9247

Insufficient logging in the entry export feature in Devolutions Server allows an authenticated user with export permissions to export a sealed entry without triggering the unseal notification to administrators via a crafted export request. This issue affects : Devolutions Server 2026.1.6.0 throug...

2.4CVSS5.4AI score0.00267EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
•added 2026/06/05 7:43 p.m.•22 views

CVE-2026-8477

Improper enforcement of the sealed-entry workflow in the entry sensitive-data retrieval feature in Devolutions Server allows an authenticated user with access to a sealed entry to retrieve its sensitive data without triggering the unseal audit notification via a crafted API request. This issue...

2.7CVSS5.5AI score0.00297EPSS
SaveExploits0References1
NVD
NVD
•added 2026/05/22 4:16 p.m.•24 views

CVE-2026-8477

Improper enforcement of the sealed-entry workflow in the entry sensitive-data retrieval feature in Devolutions Server allows an authenticated user with access to a sealed entry to retrieve its sensitive data without triggering the unseal audit notification via a crafted API request. This issue...

2.7CVSS0.00297EPSS
SaveExploits0References1
attackerkb
attackerkb
•added 2026/05/22 3:27 p.m.•25 views

CVE-2026-8477

Improper enforcement of the sealed-entry workflow in the entry sensitive-data retrieval feature in Devolutions Server allows an authenticated user with access to a sealed entry to retrieve its sensitive data without triggering the unseal audit notification via a crafted API request. This issue...

2.7CVSS5.8AI score0.00297EPSS
SaveExploits0References2Affected Software1
CVE
CVE
•added 2026/05/22 3:27 p.m.•49 views

CVE-2026-8477

An improper enforcement of the sealed-entry workflow in the sensitive-data retrieval feature of Devolutions Server allows an authenticated user with access to a sealed entry to retrieve its sensitive data. By using a crafted API request, the attacker can bypass the mandatory unseal audit notifica...

2.7CVSS5.8AI score0.00297EPSS
SaveExploits0References1Affected Software1
EUVD
EUVD
•added 2026/05/22 3:27 p.m.•22 views

EUVD-2026-31461

Improper enforcement of the sealed-entry workflow in the entry sensitive-data retrieval feature in Devolutions Server allows an authenticated user with access to a sealed entry to retrieve its sensitive data without triggering the unseal audit notification via a crafted API request. This issue...

2.7CVSS5.8AI score0.00297EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
•added 2026/05/22 3:27 p.m.•29 views

CVE-2026-8477

Improper enforcement of the sealed-entry workflow in the entry sensitive-data retrieval feature in Devolutions Server allows an authenticated user with access to a sealed entry to retrieve its sensitive data without triggering the unseal audit notification via a crafted API request. This issue...

5.8AI score0.00297EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
•added 2026/05/22 3:23 p.m.•12 views

CVE-2026-9247

Insufficient logging in the entry export feature in Devolutions Server allows an authenticated user with export permissions to export a sealed entry without triggering the unseal notification to administrators via a crafted export request. This issue affects : Devolutions Server 2026.1.6.0 throug...

5.8AI score0.00267EPSS
SaveExploits0References1
Cvelist
Cvelist
•added 2026/05/22 3:23 p.m.•35 views

CVE-2026-9247

Insufficient logging in the entry export feature in Devolutions Server allows an authenticated user with export permissions to export a sealed entry without triggering the unseal notification to administrators via a crafted export request. This issue affects : Devolutions Server 2026.1.6.0 throug...

0.00267EPSS
SaveExploits0References1
EUVD
EUVD
•added 2026/05/22 3:23 p.m.•23 views

EUVD-2026-31453

Insufficient logging in the entry export feature in Devolutions Server allows an authenticated user with export permissions to export a sealed entry without triggering the unseal notification to administrators via a crafted export request. This issue affects : Devolutions Server 2026.1.6.0 throug...

2.4CVSS5.8AI score0.00267EPSS
SaveExploits0References1
CVE
CVE
•added 2026/05/22 3:23 p.m.•58 views

CVE-2026-9247

The Devolutions Server software is affected by a vulnerability (CVE-2026-9247) caused by insufficient logging within the entry export feature. An authenticated user with export permissions can use a crafted export request to export a sealed entry without triggering the required unseal notificatio...

5.8AI score0.00267EPSS
SaveExploits0References1Affected Software1
Positive Technologies
Positive Technologies
•added 2026/05/22 12:00 a.m.•28 views

PT-2026-42793

Insufficient logging in the entry export feature in Devolutions Server allows an authenticated user with export permissions to export a sealed entry without triggering the unseal notification to administrators via a crafted export request. This issue affects : Devolutions Server 2026.1.6.0 throug...

5.8AI score0.00267EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
•added 2026/05/22 12:00 a.m.•24 views

PT-2026-42787

Improper enforcement of the sealed-entry workflow in the entry sensitive-data retrieval feature in Devolutions Server allows an authenticated user with access to a sealed entry to retrieve its sensitive data without triggering the unseal audit notification via a crafted API request. This issue...

5.8AI score0.00297EPSS
SaveExploits0References1
Rows per page
Query Builder