PT-2026-145523

CVE-2026-126326

·

Published

2026-11-11

·

Updated

2026-11-11

Description by

Score
N/A
Not available

No severity ratings or metrics are available. When they are, we'll update the corresponding info on the page.

Improper access control in the administrative role assignment endpoint in Devolutions Server 2026.3.13.0 and earlier allows an authenticated user with only vault assignment management rights to escalate privileges and read vault entry passwords via a crafted role assignment request.
Impacts
Vendors
Affected products
Weakness enumeration
CWE-284: Improper Access Control
Related identifiers
CVE-2026-126326
Found an issue in the description? Have something to add? Feel free to write us 👾
dbugs@ptsecurity.com