CVE-2026-9522

Improper access control in the PAM account discovery feature in Devolutions Server 2026.1.19 and earlier allows an authenticated user without administrative…

Medium · published June 2, 2026

CVSS v3.1
5.4
EPSS
0%
Percentile
13.1
In the wild
Unconfirmed
What it is

Improper access control in the PAM account discovery feature in Devolutions Server 2026.1.19 and earlier allows an authenticated user without administrative privileges to delete network discovery scan configurations.

The record
Technical detail
CVSS v3.1
5.4 · MEDIUM
Vector
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N
CVSS v4.0
Not supplied
EPSS
0.00230 · 13.1th percentile
Published
2026-06-02T14:08Z
EPSS history
Timeline
  • 02 JUN 14:08Z
    Improper access control in the PAM account discovery feature in Devolutions Server 2026.1.19 and earlier allows an authenticated user without administrative…
    cvelistv5