Orta CVSS 6.8
CVE-2026-9226: CVE-2026-9226: güvenlik açığı
Açıklama (NVD)
Authentication bypass in the Azure AD external login flow in Devolutions Server 2026.3.7.0 and earlier allows a remote attacker to take over a user's account via replay of a captured login-session token exposed in a redirect URL.
Özet bilgiler
- CVSS v3.1
- 6.8
CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N - EPSS
- %0,21 (yüzdelik 11)
- CWE
- CWE-294
- Yama
- Yok / bilinmiyor