VULNERABILITY INTELLIGENCE

CVE-2026-9522

CVSS score5.4 MEDIUM
EPSS probability0.14%
CISA KEVNot currently listed
Published2026-06-02
Last modified2026-07-22
CVSS vectorCVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N

Description

Improper access control in the PAM account discovery feature in Devolutions Server 2026.1.19 and earlier allows an authenticated user without administrative privileges to delete network discovery scan configurations.

Weakness classification

  • 134c704f-9b21-4f2e-91b3-4a467353bcc0: CWE-284

Primary references