Improper Access Control in Devolutions Server Affecting Account Discovery Feature

CVE-2026-9522

What is CVE-2026-9522?

The vulnerability in Devolutions Server allows an authenticated user, without administrative privileges, to improperly manage network discovery scan configurations. Specifically, this flaw in the PAM account discovery feature enables unauthorized deletion of critical scan settings, potentially disrupting the network monitoring processes for legitimate users.

References