← Database

CVE-2026-93330

MEDIUM CVSS: 4.3 Published: 2026-09-29 Modified: 2026-09-29

Description

Improper rule enforcement in the PAM Active Directory provider in Devolutions Server 2026.3.5 allows a user with PAM edit permissions to bypass the Devolutions Gateway host ruleset.

Affected Platforms

Unknown

Weakness Type

CWE-696

References