Veille CVE

Semaine du 15 juin au 21 juin 2026

3 CVE

Critique 0 Élevée 0 Moyenne 3 Faible 0 Non évaluée 0 Exploitées (KEV) Tri : plus récentes « Devolutions Server » ✕
  1. CVE-2026-12117 4.3 Moyenne

    Devolutions Server · Devolutions devolutions server

    Improper access control in the social login connection endpoint in Devolutions Server 2026.2.5 allows an authenticated vault member to enumerate social login entry metadata to which they are not authorized via a crafted API request.

  2. CVE-2026-12105 6.5 Moyenne

    Devolutions Server · Devolutions devolutions server

    Improper access control in Devolutions Server 2026.2.5, 2026.1.21 allows an authenticated user to access attachments via folder duplication with inherited permissions.

  3. CVE-2026-11890 4.3 Moyenne

    Devolutions Server · Devolutions devolutions server

    Improper access control in PAM account discovery results in Devolutions Server 2026.2.5, 2026.1.21 allows an authenticated user to retrieve account discovery scan results.