CVE-2026-11890

Devolutions / Devolutions Server PUBLISHED

Description (CNA)

Improper access control in PAM account discovery results in Devolutions Server 2026.2.5, 2026.1.21 allows an authenticated user to retrieve account discovery scan results.

Affected (CNA)

Vendor / product	Versions
Devolutions / Devolutions Server	affected 0 before 2026.2.5; affected 0 before 2026.1.21

CWE

CWE-882

References

https://devolutions.net/security/advisories/DEVO-2026-0017/

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.