CVE-2026-12105CWE-862

Improper access control in Devolutions Server 2026.2.5, 2026.1.21 allows an authenticated user to access attachments via folder duplication with inherited…

Medium · published June 16, 2026

CVSS v3.1
6.5
EPSS
0%
Percentile
21.4
In the wild
Unconfirmed
What it is

Improper access control in Devolutions Server 2026.2.5, 2026.1.21 allows

an authenticated user to access attachments via folder duplication with

inherited permissions.

The record
Technical detail
CVSS v3.1
6.5 · MEDIUM
Vector
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
CVSS v4.0
Not supplied
EPSS
0.00298 · 21.4th percentile
Weakness
CWE-862 · Missing Authorization
Published
2026-06-16T18:28Z
EPSS history
Timeline
  • 16 JUN 18:28Z
    Improper access control in Devolutions Server 2026.2.5, 2026.1.21 allows an authenticated user to access attachments via folder duplication with inherited…
    cvelistv5