https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-02T16:13:50.259888+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/euvd-2026-341980 EUVD-2026-341980 2026-10-02T16:13:50.266368+00:00 EUVD-2026-341980 https://cve.radiocsirt.org/vuln/fkie_cve-2026-17568 fkie_cve-2026-17568 2026-10-02T16:13:50.266402+00:00

Improper access control in the role membership management endpoint in Devolutions Server allows an authenticated non-administrative user holding the user-group membership management permission to escalate privileges to administrator via a crafted API request.

This issue affects :

* Devolutions Server 2026.2.4.0 through 2026.2.12.0 * Devolutions Server 2026.1.23.0 and earlier

 https://cve.radiocsirt.org/vuln/ghsa-272h-8p5w-x5r8 GHSA-272h-8p5w-x5r8 2026-10-02T16:13:50.266436+00:00

Improper access control in the role membership management endpoint in Devolutions Server allows an authenticated non-administrative user holding the user-group membership management permission to escalate privileges to administrator via a crafted API request.

This issue affects :

* Devolutions Server 2026.2.4.0 through 2026.2.12.0 * Devolutions Server 2026.1.23.0 and earlier

 https://cve.radiocsirt.org/vuln/wid-sec-w-2026-2542 WID-SEC-W-2026-2542 — Devolutions Server: Mehrere Schwachstellen 2026-10-02T16:13:50.266456+00:00

Ein entfernter, authentisierter Angreifer kann mehrere Schwachstellen in Devolutions Server ausnutzen, um Administratorrechte zu erlangen und vertrauliche Informationen offenzulegen.