CVE-2026-11890

Improper access control in PAM account discovery results in Devolutions Server 2026.2.5, 2026.1.21 allows an authenticated user to retrieve account discovery…

Medium · published June 16, 2026

CVSS v3.1
4.3
EPSS
0%
Percentile
13.5
In the wild
Unconfirmed
What it is

Improper access control in PAM account discovery results in Devolutions

Server 2026.2.5, 2026.1.21 allows an authenticated user to retrieve

account discovery scan results.

The record
Technical detail
CVSS v3.1
4.3 · MEDIUM
Vector
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N
CVSS v4.0
Not supplied
EPSS
0.00234 · 13.5th percentile
Published
2026-06-16T18:24Z
EPSS history
Timeline
  • 16 JUN 18:24Z
    Improper access control in PAM account discovery results in Devolutions Server 2026.2.5, 2026.1.21 allows an authenticated user to retrieve account discovery…
    cvelistv5