CVE-2026-114486

Description

Incorrect authorization in the Devolutions Gateway token generation in Devolutions Server 2026.3.10.0  and earlier allows an authenticated non-administrative attacker to bypass the Network Access Rules of a virtual gateway and reach denied hosts via wildcard additional destinations signed into the gateway token.

Traduire en français

Produits concernés

• Devolutions Server

Faiblesses (CWE)

• CWE-863

Références

• https://devolutions.net/security/advisories/DEVO-2026-0037/

Ailleurs

• NVD
• CVE.org
• CIRCL Vulnerability-Lookup
• CERT-FR
• GitHub Advisories