CVE-2026-114486
INFO
Priority: 0.00
BB Relevance:
0/100
Published: 2026-10-22
Modified: 2026-10-22
First seen: 2026-10-29
Status: pending_score
Description
Incorrect authorization in the Devolutions Gateway token generation in Devolutions Server 2026.3.10.0 and earlier allows an authenticated non-administrative attacker to bypass the Network Access Rules of a virtual gateway and reach denied hosts via wildcard additional destinations signed into the gateway token.