CVE-2026-105488

HighCVSS 7.1/10Last modified Oct 7, 2026

Description

Missing authorization in the global vault in Devolutions Server 2026.3.7.0 and earlier allows an authenticated user with only the global vault view permission to modify and delete global contact and folder entries.

Metrics

CVSS 3.1 7.1/10CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:H/A:N

Weakness enumeration

CWE-862

Affected software

Source: the vendor's advisory (CNA). NVD analysis pending.

VendorProductVersions
DevolutionsServer< 2026.3.8

References

Timeline

Published
Oct 6, 2026
Last modified
Oct 7, 2026
NVD status
Awaiting Analysis

Related CVEs from 2026

CVE-2026-1054899.9Adobe Campaign Classic (ACC) is affected by an Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerabCVE-2026-105495.3LDAP filter injection vulnerability in Yandex Database prior to 25.3.1.25 allows a remote attacker with valid LDAP credentials to bypass groCVE-2026-1054908.8Stack-based buffer overflow in Windows Advanced Rasterization Platform allows an authorized attacker to elevate privileges locally.CVE-2026-1054918.8Heap-based buffer overflow in Windows Advanced Rasterization Platform allows an authorized attacker to elevate privileges locally.CVE-2026-1054925.3Out-of-bounds read in Microsoft Remote Registry Service allows an authorized attacker to deny service over a network.CVE-2026-1054938.8Stack-based buffer overflow in Windows Advanced Rasterization Platform allows an authorized attacker to elevate privileges locally.CVE-2026-1054947.8Untrusted search path in Azure NFS mount helper (aznfs) allows an authorized attacker to elevate privileges locally.CVE-2026-1054958.8Heap-based buffer overflow in Windows Advanced Rasterization Platform allows an authorized attacker to elevate privileges locally.CVE-2026-1054968.8Double free in Windows Advanced Rasterization Platform allows an authorized attacker to elevate privileges locally.CVE-2026-1054978.8Heap-based buffer overflow in Windows Advanced Rasterization Platform allows an authorized attacker to elevate privileges locally.CVE-2026-1054988.8Heap-based buffer overflow in Windows Advanced Rasterization Platform allows an authorized attacker to elevate privileges locally.CVE-2026-1054998.8Out-of-bounds read in Windows Advanced Rasterization Platform allows an authorized attacker to elevate privileges locally.
CVE-2026-105488: High severity, CVSS 7.1 | Vulnix