CVE-2026-9590

Improper access control in the permission validation component in Devolutions Server 2026.1.19 and earlier allows an authenticated user with entry edit…

Medium · published June 2, 2026

CVSS v3.1
5.3
EPSS
0%
Percentile
20.9
In the wild
Unconfirmed
What it is

Improper access control in the permission validation component in Devolutions Server 2026.1.19 and earlier allows an authenticated user with entry edit privileges to modify asset information without the required permission.

The record
Technical detail
CVSS v3.1
5.3 · MEDIUM
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N
CVSS v4.0
Not supplied
EPSS
0.00294 · 20.9th percentile
Published
2026-06-02T14:07Z
EPSS history
Timeline
  • 02 JUN 14:07Z
    Improper access control in the permission validation component in Devolutions Server 2026.1.19 and earlier allows an authenticated user with entry edit…
    cvelistv5