← Database

CVE-2026-9249

LOW CVSS: 3.1 Published: 2026-05-22 Modified: 2026-07-23

Description

Unverified password change in Devolutions Server allows an attacker to change a user's password without providing the previous one via a crafted password change request. This issue affects : * Devolutions Server 2026.1.6.0 through 2026.1.16.0 * Devolutions Server 2025.3.20.0 and earlier

Affected Platforms

Devolutions Devolutions Server

Weakness Type

CWE-620

References