Multi-Factor Authentication Bypass in Devolutions Server

CVE-2026-9047

What is CVE-2026-9047?

A security vulnerability exists in the multi-factor authentication management feature of Devolutions Server, where improper handling of the factor key state allows an attacker with knowledge of a user's password to potentially bypass multi-factor authentication. This could occur when the user reconfigures their authentication factors. It affects multiple versions of Devolutions Server, making it crucial for users to apply the necessary security updates to mitigate this risk.

References