https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-07T16:59:30.027172+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/cve-2026-17568 CVE-2026-17568 2026-10-07T16:59:30.069013+00:00

Affected: Devolutions Server

Improper access control in the role membership management endpoint in Devolutions Server allows an authenticated non-administrative user holding the user-group membership management permission to escalate privileges to administrator via a crafted API request.

This issue affects :

* Devolutions Server 2026.2.4.0 through 2026.2.12.0 * Devolutions Server 2026.1.23.0 and earlier