https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-02T18:35:15.907428+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/euvd-2026-341983 EUVD-2026-341983 2026-10-02T18:35:15.960939+00:00 EUVD-2026-341983 https://cve.radiocsirt.org/vuln/fkie_cve-2026-17569 fkie_cve-2026-17569 2026-10-02T18:35:15.960975+00:00

Improper access control in the NetBox synchronizer in Devolutions Server allows an authenticated user with view-only permission on an entry to obtain a stored API token via the partial connection endpoint.

This issue affects :

* Devolutions Server 2026.2.4.0 through 2026.2.12.0 * Devolutions Server 2026.1.23.0 and earlier

 https://cve.radiocsirt.org/vuln/ghsa-552f-mjvj-8m37 GHSA-552f-mjvj-8m37 2026-10-02T18:35:15.961012+00:00

Improper access control in the NetBox synchronizer in Devolutions Server allows an authenticated user with view-only permission on an entry to obtain a stored API token via the partial connection endpoint.

This issue affects :

* Devolutions Server 2026.2.4.0 through 2026.2.12.0 * Devolutions Server 2026.1.23.0 and earlier

 https://cve.radiocsirt.org/vuln/wid-sec-w-2026-2542 WID-SEC-W-2026-2542 — Devolutions Server: Mehrere Schwachstellen 2026-10-02T18:35:15.961030+00:00

Ein entfernter, authentisierter Angreifer kann mehrere Schwachstellen in Devolutions Server ausnutzen, um Administratorrechte zu erlangen und vertrauliche Informationen offenzulegen.