CVE-2026-4925
Improper access control in the users MFA feature in Devolutions Server allows an authenticated user to bypass administrator-enforced restrictions and remove their own multi-fact…
Published: 2026-04-01 · CVSS: 5.0 · CVSS 3.1
Improper access control in the users MFA feature in Devolutions Server allows an authenticated user to bypass administrator-enforced restrictions and remove their own multi-factor authentication (MFA) configuration via a crafted request. This issue affects Server: from 2026.1.6 through 2026.1.11.
Source: CVE Program · Revision 8b16575c39f1e1810c5e863010da073d2d3285e7