VYPR
← All advisories
Medium severity5.3NVD Advisory· Published Jun 2, 2026· Updated Jun 2, 2026

CVE-2026-9590

CVE-2026-9590

Description

Improper access control in the permission validation component in Devolutions Server 2026.1.19 and earlier allows an authenticated user with entry edit privileges to modify asset information without the required permission.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

2
  • Devolutions/Server2 versions
    cpe:2.3:a:devolutions:devolutions_server:*:*:*:*:*:*:*:*+ 1 more
    • cpe:2.3:a:devolutions:devolutions_server:*:*:*:*:*:*:*:*range: <2026.1.20.0
    • (no CPE)range: <=2026.1.19

Patches

Vulnerability mechanics

References

1

News mentions

0

No linked articles in our index yet.