Insufficient Logging Vulnerability in Devolutions Server by Devolutions

CVE-2026-9247

What is CVE-2026-9247?

The Devolutions Server has a vulnerability that permits an authenticated user with export permissions to execute a crafted export request, allowing them to export a sealed entry without alerting administrators through the unseal notification. This lack of sufficient logging can pose a significant risk, as it prevents timely detection of unauthorized export activities. It is crucial for organizations using affected versions of Devolutions Server to implement mitigation strategies to safeguard against potential exploitation.

References