CVEvulnerability

CVE-2026-114486

Published 2026-10-22 Modified 2026-10-22 Official page ↗
Status
Awaiting Analysis
Published
2026-10-22
Last modified
2026-10-22
Assigner
[email protected]
Weaknesses
CWE-863

Description

Incorrect authorization in the Devolutions Gateway token generation in Devolutions Server 2026.3.10.0  and earlier allows an authenticated non-administrative attacker to bypass the Network Access Rules of a virtual gateway and reach denied hosts via wildcard additional destinations signed into the gateway token.

Related

Weakness · CWE (1)

  • CWE-863 Incorrect Authorization weakness

References