Veille CVE

Semaine du 5 octobre au 11 octobre 2026

3 CVE

Critique 0 Élevée 1 Moyenne 2 Faible 0 Non évaluée 0 Exploitées (KEV) Tri : plus récentes « Devolutions Server » ✕
  1. CVE-2026-9226 6.8 Moyenne

    Devolutions Server

    Authentication bypass in the Azure AD external login flow in Devolutions Server 2026.3.7.0 and earlier allows a remote attacker to take over a user's account via replay of a captured login-session token exposed in a redirect URL.

  2. CVE-2026-105488 7.1 Élevée

    Devolutions Server

    Missing authorization in the global vault in Devolutions Server 2026.3.7.0 and earlier allows an authenticated user with only the global vault view permission to modify and delete global contact and folder entries.

  3. CVE-2026-105485 6.8 Moyenne

    Devolutions Server

    Authentication bypass OAuth device authorization flow in Devolutions Server 2026.3.7.0 and earlier allows a remote attacker to take over a user's account via replay of a captured device verification link by an authenticated victim.