CVE-2026-3131 | Teknoloji dünyasından en güncel haberleri ve güvenlikle ilgili gelişmeleri takip edin.

Improper access control in multiple DVLS REST API endpoints in Devolutions Server 2025.3.14.0 and earlier allows an authenticated user with view-only permissi…
Medium CVSS: 6.5

CVE-2026-3131

Improper
access control in multiple DVLS REST API endpoints in Devolutions
Server 2025.3.14.0 and earlier allows an authenticated user with view-only permission to access sensitive connection data.
Vendor
Devolutions
Product
Devolutions Server
CWE
CWE-200
Yayın Tarihi
2026-02-24 20:27:50
Güncelleme
2026-02-26 17:23:03
Source Identifier
security@devolutions.net
KEV Date Added
-

Kategoriler

CWE-200 Devolutions Server MEDIUM Devolutions 2026

Referanslar

https://devolutions.net/security/advisories/DEVO-2026-0004/