https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-07T14:48:50.367615+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/euvd-2026-278599 EUVD-2026-278599 2026-10-07T14:48:50.419162+00:00 EUVD-2026-278599 https://cve.radiocsirt.org/vuln/fkie_cve-2026-5175 fkie_cve-2026-5175 2026-10-07T14:48:50.419200+00:00

Improper access control in the multi-factor authentication (MFA) management API in Devolutions Server allows an authenticated attacker to delete their own configured MFA factors and reduce account protection to password-only authentication via crafted HTTP requests.

This issue affects Server: from 2026.1.6 through 2026.1.11.

 https://cve.radiocsirt.org/vuln/ghsa-77p2-xw8p-439j GHSA-77p2-xw8p-439j 2026-10-07T14:48:50.419251+00:00

Improper access control in the multi-factor authentication (MFA) management API in Devolutions Server allows an authenticated attacker to delete their own configured MFA factors and reduce account protection to password-only authentication via crafted HTTP requests.

This issue affects Server: from 2026.1.6 through 2026.1.11.

 https://cve.radiocsirt.org/vuln/wid-sec-w-2026-0958 WID-SEC-W-2026-0958 — Devolutions Server: Mehrere Schwachstellen 2026-10-07T14:48:50.419270+00:00

Ein entfernter, authentisierter Angreifer kann mehrere Schwachstellen in Devolutions Server ausnutzen, um Administratorrechte zu erlangen, Sicherheitsmaßnahmen zu umgehen, Daten zu manipulieren oder vertrauliche Informationen offenzulegen.