CVE-2026-90971 in Serverالمعلومات

الملخص

بحسب MITRE • 15/09/2026

Server-Side Request Forgery (SSRF) in the VMware synchronization feature in Devolutions Server 2026.2.16 and earlier allows a low-privileged authenticated user to obtain other users' credentials and reach internal or cloud-metadata network endpoints via a crafted connection definition submitted for datacenter discovery.

If you want to get best quality of vulnerability data, you may have to visit VulDB.

مسؤول

DEVOLUTIONS

حجز

14/09/2026

إفشاء

15/09/2026

الاعتدال

تمت الموافقة

إدخال

VDB-404611

EPSS

0.00138

KEV

لا

النشاطات

منخفض جدًا

المصادر

Interested in the pricing of exploits?

See the underground prices here!