Input Validation Vulnerability in Devolutions Server Affects User Authentication

CVE-2026-9245

What is CVE-2026-9245?

An improper input validation issue exists in Devolutions Server's external authentication provider flow that allows unauthenticated remote attackers to exploit this vulnerability. Attackers can craft malicious login links that redirect victims to domains controlled by the attacker, posing significant risks to the security of sensitive information. Users of affected versions should apply patches and mitigations promptly to avoid potential exploits.

References