CVE-2026-4828 | Teknoloji dünyasından en güncel haberleri ve güvenlikle ilgili gelişmeleri takip edin.

Improper authentication in the OAuth login functionality in Devolutions Server 2026.1.11 and earlier allows a remote attacker with valid credentials to bypass m…
High CVSS: 8.2

CVE-2026-4828

Improper authentication in the OAuth login functionality in Devolutions Server 2026.1.11 and earlier allows a remote attacker with valid credentials to bypass multi-factor authentication via a crafted login request.
Vendor
Devolutions
Product
Devolutions Server
CWE
CWE-1390
Yayın Tarihi
2026-04-01 16:23:51
Güncelleme
2026-04-03 19:28:06
Source Identifier
security@devolutions.net
KEV Date Added
-

Kategoriler

CWE-1390 Devolutions Server HIGH Devolutions 2026

Referanslar

https://devolutions.net/security/advisories/DEVO-2026-0010