Beveiligingsadvies

CVE-2026-3638

CVE-kwetsbaarheidsdetails - eXtreme Datacenter Security Operations

Gepubliceerd 2026-03-09 18:51:13
Laatst bijgewerkt 2026-03-09 19:31:20
Toegewezen door DEVOLUTIONS
CVSS-score 5.9
Status PUBLISHED

Beschrijving

Improper access control in user and role restore API endpoints in Devolutions Server 2025.3.11.0 and earlier allows a low-privileged authenticated user to restore deleted users and roles via crafted API requests.