Improper Access Control in Devolutions Server by Devolutions

CVE-2026-17568

What is CVE-2026-17568?

An access control flaw in Devolutions Server allows authenticated non-administrative users with specific permissions to escalate their privileges to that of an administrator. This vulnerability can be exploited through a specially crafted API request, posing significant risks for organizations that rely on the affected versions of the software. Users should ensure their systems are up to date to mitigate potential security breaches.

References