CVE-2026-4925 | Teknoloji dünyasından en güncel haberleri ve güvenlikle ilgili gelişmeleri takip edin.

Improper access control in the users MFA feature in Devolutions Server allows an authenticated user to bypass administrator-enforced restrictions and remove the…
Medium CVSS: 5.0

CVE-2026-4925

Improper access control in the users MFA feature in Devolutions Server allows an authenticated user to bypass administrator-enforced restrictions and remove their own multi-factor authentication (MFA) configuration via a crafted request.





This issue affects Server: from 2026.1.6 through 2026.1.11.
Vendor
Devolutions
Product
Devolutions Server
CWE
CWE-862
Yayın Tarihi
2026-04-01 16:23:51
Güncelleme
2026-04-03 19:14:36
Source Identifier
security@devolutions.net
KEV Date Added
-

Kategoriler

CWE-862 Devolutions Server MEDIUM Devolutions 2026

Referanslar

https://devolutions.net/security/advisories/DEVO-2026-0010