Vulnerabilities
Vulnerable Software

Vulnerability Details CVE-2026-110287

Improper access control in asset contact password in Devolutions Server 2026.3.8.0 and earlier allows an authenticated user with general Edit but without Edit asset permission to modify the asset contact password via a crafted direct request to the partial-save endpoint.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.002
EPSS Ranking 7.7%
CVSS Severity
CVSS v3 Score 4.3
Products affected by CVE-2026-110287


Contact Us

Shodan ® - All rights reserved