Improper access control in the PAM account discovery feature in Devolutions Server 2026.1.19 and earlier allows an authenticated user without administrative privileges to delete network discovery scan configurations.
Advisories
No advisories yet.
Fixes
Solution
No solution given by the vendor.
Workaround
No workaround given by the vendor.
References
| Link | Providers |
|---|---|
| https://devolutions.net/security/advisories/DEVO-2026-0014/ |
|
History
Tue, 02 Jun 2026 18:30:00 +0000
| Type | Values Removed | Values Added |
|---|---|---|
| First Time appeared |
Devolutions
Devolutions server |
|
| Vendors & Products |
Devolutions
Devolutions server |
Tue, 02 Jun 2026 17:45:00 +0000
| Type | Values Removed | Values Added |
|---|---|---|
| Title | Authenticated User Can Delete Network Discovery Scan Configurations in Devolutions Server | |
| Weaknesses | CWE-284 |
Tue, 02 Jun 2026 15:45:00 +0000
| Type | Values Removed | Values Added |
|---|---|---|
| Description | Improper access control in the PAM account discovery feature in Devolutions Server 2026.1.19 and earlier allows an authenticated user without administrative privileges to delete network discovery scan configurations. | |
| References |
|
Projects
Sign in to view the affected projects.
Status: PUBLISHED
Assigner: DEVOLUTIONS
Published:
Updated: 2026-06-02T14:08:07.964Z
Reserved: 2026-05-25T19:20:49.940Z
Link: CVE-2026-9522
No data.
Status : Awaiting Analysis
Published: 2026-06-02T16:16:45.873
Modified: 2026-06-02T17:19:00.703
Link: CVE-2026-9522
No data.
OpenCVE Enrichment
Updated: 2026-06-02T18:15:14Z
Weaknesses