CVE-2026-4924
Improper
authentication in the two-factor authentication (2FA) feature in
Devolutions Server 2026.1.11 and earlier allows a remote attacker with valid
credentials to bypass multifactor authentication and gain unauthorized
access to the victim account via reuse of a partially authenticated
session token.
authentication in the two-factor authentication (2FA) feature in
Devolutions Server 2026.1.11 and earlier allows a remote attacker with valid
credentials to bypass multifactor authentication and gain unauthorized
access to the victim account via reuse of a partially authenticated
session token.
Vendor
Product
CWE
Yayın Tarihi
2026-04-01 16:23:51
Güncelleme
2026-04-03 19:22:06
Source Identifier
security@devolutions.net
KEV Date Added
-