CVE-2026-1007

Publication date

2026-01-19 14:32:06

Family

DEVOLUTIONS

State

PUBLISHED

Description

Incorrect Authorization vulnerability in virtual gateway component in Devolutions Server allows attackers to bypass deny IP rules.This issue affects Server: from 2025.3.1 through 2025.3.12.