CVE-2026-114487
INFO
Priority: 0.00
BB Relevance:
0/100
Published: 2026-10-22
Modified: 2026-10-22
First seen: 2026-10-29
Status: pending_score
Description
Missing authorization in the PAM AD computer import endpoint in Devolutions Server 2026.3.5.0 through 2026.3.10.0 and 2026.2.20.0 and earlier allows an authenticated non-administrative user with a PAM license to create PAM sub-providers under existing AD providers via a crafted import request.