CVE-2026-4829
Improper authentication in the external OAuth authentication flow in Devolutions Server 2026.1.11 and earlier allows an authenticated user to authenticate as other users, includ…
Published: 2026-04-01 · CVSS: 5.4 · CVSS 3.1
Improper authentication in the external OAuth authentication flow in Devolutions Server 2026.1.11 and earlier allows an authenticated user to authenticate as other users, including administrators, via reuse of a session code from an external authentication flow.
Source: CVE Program · Revision 8b16575c39f1e1810c5e863010da073d2d3285e7