Security Advisory

CVE-2026-3638

CVE vulnerability detail — eXtreme Datacenter Security Operations

Published 2026-03-09 18:51:13

Last updated 2026-03-09 19:31:20

Assigner DEVOLUTIONS

State PUBLISHED

Description

Improper access control in user and role restore API endpoints in Devolutions Server 2025.3.11.0 and earlier allows a low-privileged authenticated user to restore deleted users and roles via crafted API requests.

← Browse all CVEs View on cve.org ↗