https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-07T07:14:55.057862+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/euvd-2026-278589 EUVD-2026-278589 2026-10-07T07:14:55.060609+00:00 EUVD-2026-278589 https://cve.radiocsirt.org/vuln/fkie_cve-2026-4927 fkie_cve-2026-4927 2026-10-07T07:14:55.060640+00:00

Exposure of sensitive information in the users MFA feature in Devolutions Server allows users with user management privileges to obtain other users OTP keys via an authenticated API request.

This issue affects Server: from 2026.1.6 through 2026.1.11.

 https://cve.radiocsirt.org/vuln/ghsa-vrg4-m5xw-9pq5 GHSA-vrg4-m5xw-9pq5 2026-10-07T07:14:55.060672+00:00

Exposure of sensitive information in the users MFA feature in Devolutions Server allows users with user management privileges to obtain other users OTP keys via an authenticated API request.

This issue affects Server: from 2026.1.6 through 2026.1.11.

 https://cve.radiocsirt.org/vuln/wid-sec-w-2026-0958 WID-SEC-W-2026-0958 — Devolutions Server: Mehrere Schwachstellen 2026-10-07T07:14:55.060690+00:00

Ein entfernter, authentisierter Angreifer kann mehrere Schwachstellen in Devolutions Server ausnutzen, um Administratorrechte zu erlangen, Sicherheitsmaßnahmen zu umgehen, Daten zu manipulieren oder vertrauliche Informationen offenzulegen.