CVE-2026-9224

None

Open

TLP:CLEAR

NVD CVE.org

AI Analysis

No AI analysis yet.

Description

Missing authorization in the user profile update feature in Devolutions Server allows an authenticated Active Directory user to modify their own profile attributes via a crafted API request. This issue affects : * Devolutions Server 2026.1.6.0 through 2026.1.16.0 * Devolutions Server 2025.3.20.0 and earlier

Details

EPSS Score ⓘ: 0.21%

11.8th percentile
Confidence: 90%
Published: May 22, 2026
Last Modified: May 22, 2026

Notes

0

Log in to add a note

No notes yet. Click "Add Note" to create the first analysis note.

Opinions

0

Log in to add an opinion

No opinions yet. Be the first to assess this intelligence.