CVE-2026-9245

None

Open

TLP:CLEAR

NVD CVE.org

AI Analysis

No AI analysis yet.

Description

Improper input validation in the external authentication provider flow in Devolutions Server allows an unauthenticated remote attacker to redirect victims to an attacker-controlled domain via a crafted login link. This issue affects : * Devolutions Server 2026.1.6.0 through 2026.1.16.0 * Devolutions Server 2025.3.20.0 and earlier

Details

EPSS Score ⓘ: 0.23%

13.9th percentile
Confidence: 90%
Published: May 22, 2026
Last Modified: May 22, 2026

Notes

0

Log in to add a note

No notes yet. Click "Add Note" to create the first analysis note.

Opinions

0

Log in to add an opinion

No opinions yet. Be the first to assess this intelligence.