Improper Access Control in Devolutions Server Affects Documentation Vaults
CVE-2026-6706

Currently unrated

Key Information:

Vendor: Devolutions
Status: Server
Vendor: CVE Published:; 28 April 2026

🔔 Create Devolutions Vulnerability Alert

What is CVE-2026-6706?

The vulnerability in Devolutions Server allows authenticated attackers to exploit improper access control within the vault documentation feature. By crafting specific API requests, attackers can gain unauthorized access to sensitive documentation content stored in restricted vaults. This flaw could potentially lead to significant information exposure and compromise the confidentiality of sensitive data.

Affected Version(s)

Server 0 <= 2026.1.14.0

References

https://devolutions.net/security/advisories/DEVO-2026-0011

Download the Critical Vulnerability Management Cheat Sheet

Timeline

Vulnerability published
Apr 28, 2026
Vulnerability Reserved
Apr 20, 2026

CVE-2026-6706 Data

JSON