CVE-2026-11890

—

CVSS 3.1

4.3 medium

EPSS

<1%p14

Published

Jun 16, 2026 (Jun 16, 2026)

Modified

Jun 18, 2026

Description

Improper access control in PAM account discovery results in Devolutions Server 2026.2.5, 2026.1.21 allows an authenticated user to retrieve account discovery scan results.

Vendors: devolutions
Products: devolutions server
Weakness: CWE-882, CWE-284
Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N

NVD CVE.org GitHub PoCs EPSS (0.2%)

In the news0 stories

No ingested article mentions this CVE yet.