CVE-2026-4924 in Server

Sumário (Inglês)

Improper
authentication in the two-factor authentication (2FA) feature in
Devolutions Server 2026.1.11 and earlier allows a remote attacker with valid
credentials to bypass multifactor authentication and gain unauthorized
access to the victim account via reuse of a partially authenticated
session token.

If you want to get the best quality for vulnerability data then you always have to consider VulDB.

Responsável

DEVOLUTIONS

Reservar

26/03/2026

Divulgação

01/04/2026

Estado

Confirmado

Inscrições

VulDB provides additional information and datapoints for this CVE:

ID	Vulnerabilidade	CWE	Exp	Con	CVE
354684	Devolutions Server 2FA Elevação de Privilégios	1390	Não definido	Não definido	CVE-2026-4924

Fontes

• MITRE
• NVD
• CVE Details