CVE-2026-11890

Vulnerability Description

Improper access control in PAM account discovery results in Devolutions
Server 2026.2.5, 2026.1.21 allows an authenticated user to retrieve
account discovery scan results.

Vulnerability Details

Published Date

June 16, 2026

Last Modified

June 16, 2026

CWE ID

CWE-882

Source

NVD

Vendor

Devolutions

Product

Devolutions Server

External References

https://devolutions.net/security/advisories/DEVO-2026-0017/

Vulnerability Description

Vulnerability Details

External References

Discussion (0)

Add Comment