https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-06T19:54:55.599929+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/cve-2026-10787 CVE-2026-10787 2026-10-06T19:54:55.621385+00:00

Affected: Devolutions Server

Missing authorization in the deleted user groups API in Devolutions Server allows an authenticated low-privileged user to enumerate metadata of deleted user groups via a crafted API request.

This issue affects :

* Devolutions Server 2026.2.4.0 * Devolutions Server 2026.1.20.0 and earlier