UNKNOWN NVD

CVE-2026-114486

Incorrect authorization in the Devolutions Gateway token generation in Devolutions Server 2026.3.10.0 and earlier allows an authenticated non-administrative at

Incorrect authorization in the Devolutions Gateway token generation in Devolutions Server 2026.3.10.0 and earlier allows an authenticated non-administrative attacker to bypass the Network Access Rules of a virtual gateway and reach denied hosts via wildcard additional destinations signed into the gateway token.

References

https://devolutions.net/security/advisories/DEVO-2026-0037/

Published: 2026-10-22 · Source: NVD · Feed updated: 2026-10-22

This unknown severity vulnerability was published on 2026-10-22 via NVD.

vulnfeed aggregates 17299 vulnerabilities from NVD, CISA KEV, Ubuntu, Debian, Red Hat, Kubernetes, Exploit-DB, OSS-Security, GitHub and OpenStack — updated every 4 hours.