Devolutions: >> Devolutions Server >> 2026.2.5.0 Security Vulnerabilities
Improper access control in Devolutions Server 2026.2.5, 2026.1.21 allows
an authenticated user to access attachments via folder duplication with
inherited permissions.
CVSS Score
6.5
EPSS Score
0.003
Published
2026-06-16
Improper access control in the social login connection endpoint in
Devolutions Server 2026.2.5 allows an authenticated vault member to
enumerate social login entry metadata to which they are not authorized
via a crafted API request.
CVSS Score
4.3
EPSS Score
0.003
Published
2026-06-16
Page 2