CVE-2026-1007

Devolutions / Server PUBLISHED

Description (CNA)

Incorrect Authorization vulnerability in virtual gateway component in Devolutions Server allows attackers to bypass deny IP rules.This issue affects Server: from 2025.3.1 through 2025.3.12.

Affected (CNA)

Vendor / product	Versions
Devolutions / Server	affected 2025.3.1 through 2025.3.12

CWE

CWE-863

References

https://devolutions.net/security/advisories/DEVO-2026-0003/

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.