Veille CVE

Vendredi 22 mai 2026

4 CVE sur 12

Critique 0 Élevée 2 Moyenne 6 Faible 4 Non évaluée 0 Exploitées (KEV) Tri : plus récentes « Devolutions devolutions server » ✕
  1. CVE-2026-9249 3.1 Faible

    Devolutions Server · Devolutions devolutions server

    Unverified password change in Devolutions Server allows an attacker to change a user's password without providing the previous one via a crafted password change request. This issue affects : * Devolutions Server 2026.1.6.0 through 2026.1.16.0 * Devolutions Server 2025.3.20.0 and earlier

  2. CVE-2026-9248 2.6 Faible

    Devolutions Server · Devolutions devolutions server

    Authorization bypass in the entry duplication feature in Devolutions Server allows an authenticated user with write access to any vault to copy documentation and attachments from an entry in a vault they cannot access via a crafted save request. This issue affects : * Devolutions Server 2026.1.6.0 through 2026.1.16.0 * Devolutions Server 2025.3.20.0 and earlier

  3. CVE-2026-9247 2.4 Faible

    Devolutions Server · Devolutions devolutions server

    Insufficient logging in the entry export feature in Devolutions Server allows an authenticated user with export permissions to export a sealed entry without triggering the unseal notification to administrators via a crafted export request. This issue affects : * Devolutions Server 2026.1.6.0 through 2026.1.16.0 * Devolutions Server 2025.3.20.0 and earlier

  4. CVE-2026-8477 2.7 Faible

    Devolutions Server · Devolutions devolutions server

    Improper enforcement of the sealed-entry workflow in the entry sensitive-data retrieval feature in Devolutions Server allows an authenticated user with access to a sealed entry to retrieve its sensitive data without triggering the unseal audit notification via a crafted API request. This issue affects : * Devolutions Server 2026.1.6.0 through 2026.1.16.0 * Devolutions Server 2025.3.20.0 and earlier