Security Advisory

CVE-2026-15058

CVE vulnerability detail - eXtreme Datacenter Security Operations

Published 2026-07-14 18:11:10

Last updated 2026-07-15 14:46:13

Assigner DEVOLUTIONS

CVSS score not scored

State PUBLISHED

Description

Improper authorization in the secure messages deletion endpoint in Devolutions Server 2026.2.11, 2026.1.22 allows an authenticated user to delete another user's messages via a direct object reference to the message identifier.

← Browse all CVEs View on cve.org ↗