Description (CNA)
Incorrect authorization in the Devolutions Gateway token generation in Devolutions Server 2026.3.10.0 and earlier allows an authenticated non-administrative attacker to bypass the Network Access Rules of a virtual gateway and reach denied hosts via wildcard additional destinations signed into the gateway token.
Affected (CNA)
| Vendor / product | Versions |
|---|---|
| Devolutions / Server | affected 0 before 2026.3.11 |
CWE
CWE-863