CVE-2026-114486
CVE-2026-114486
This page contains facts from public vulnerability sources. Check the original advisory before updating.
Incorrect authorization in the Devolutions Gateway token generation in Devolutions Server 2026.3.10.0 and earlier allows an authenticated non-administrative attacker to bypass the Network Access Rules of a virtual gateway and reach denied hosts via wildcard additional destinations signed into the gateway token.
EPSS 0.1% · Fix available
- Published
- Updated
Affected products and versions
server
- Versions
- ≥ 0, < 2026.3.11: Affected (custom)
Update to 2026.3.11