Improper access control in the PAM account discovery feature in Devolutions Server 2026.1.19 and earlier allows an authenticated user without administrative privileges to delete network discovery scan configurations.
Metrics
Affected Vendors & Products
No data.
No data.
No data.
OpenCVE Enrichment is a feature of OpenCVE that uses AI to automatically link vendors and products to CVEs. Learn more on GitHub.
| Vendors | Products |
|---|
References
| Link | Providers |
|---|---|
| https://devolutions.net/security/advisories/DEVO-2026-0014/ |
|
History
Tue, 02 Jun 2026 17:45:00 +0000
| Type | Values Removed | Values Added |
|---|---|---|
| Title | Authenticated User Can Delete Network Discovery Scan Configurations in Devolutions Server | |
| Weaknesses | CWE-284 |
Tue, 02 Jun 2026 15:45:00 +0000
| Type | Values Removed | Values Added |
|---|---|---|
| Description | Improper access control in the PAM account discovery feature in Devolutions Server 2026.1.19 and earlier allows an authenticated user without administrative privileges to delete network discovery scan configurations. | |
| References |
|
MITRE
Status: PUBLISHED
Assigner: DEVOLUTIONS
Published:
Updated: 2026-06-02T14:08:07.964Z
Reserved: 2026-05-25T19:20:49.940Z
Link: CVE-2026-9522
Vulnrichment
No data.
NVD
Status : Awaiting Analysis
Published: 2026-06-02T16:16:45.873
Modified: 2026-06-02T17:19:00.703
Link: CVE-2026-9522
Redhat
No data.
OpenCVE Enrichment
Updated: 2026-06-02T17:45:06Z