Improper access control in the PAM account discovery feature in Devolutions Server 2026.1.19 and earlier allows an authenticated user without administrative privileges to delete network discovery scan configurations.

Project Subscriptions

Vendors Products
Devolutions Subscribe
Advisories

No advisories yet.

Fixes

Solution

No solution given by the vendor.


Workaround

No workaround given by the vendor.

History

Tue, 02 Jun 2026 18:30:00 +0000

Type Values Removed Values Added
First Time appeared Devolutions
Devolutions server
Vendors & Products Devolutions
Devolutions server

Tue, 02 Jun 2026 17:45:00 +0000

Type Values Removed Values Added
Title Authenticated User Can Delete Network Discovery Scan Configurations in Devolutions Server
Weaknesses CWE-284

Tue, 02 Jun 2026 15:45:00 +0000

Type Values Removed Values Added
Description Improper access control in the PAM account discovery feature in Devolutions Server 2026.1.19 and earlier allows an authenticated user without administrative privileges to delete network discovery scan configurations.
References

Projects

Sign in to view the affected projects.

cve-icon MITRE

Status: PUBLISHED

Assigner: DEVOLUTIONS

Published:

Updated: 2026-06-02T14:08:07.964Z

Reserved: 2026-05-25T19:20:49.940Z

Link: CVE-2026-9522

cve-icon Vulnrichment

No data.

cve-icon NVD

Status : Awaiting Analysis

Published: 2026-06-02T16:16:45.873

Modified: 2026-06-02T17:19:00.703

Link: CVE-2026-9522

cve-icon Redhat

No data.

cve-icon OpenCVE Enrichment

Updated: 2026-06-02T18:15:14Z

Weaknesses