Abfe

**Name of the Vulnerable Software and Affected Versions** Devolutions Server versions prior to 2026.3.5.1 **Description** Missing authorization in the gateway network scan token API allows an authenticated low-privileged user to generate a network scan token. This enables the user to perform internal network discovery and port scanning through the gateway by sending a crafted API request. **Recommendations** Update Devolutions Server to version 2026.3.5.1 or later.