CVE-2026-9590

MediumCVSS 5.3/10Last modified Jul 22, 2026

Description

Improper access control in the permission validation component in Devolutions Server 2026.1.19 and earlier allows an authenticated user with entry edit privileges to modify asset information without the required permission.

Metrics

CVSS 3.1 5.3/10CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N

Weakness enumeration

CWE-284

Affected software

No affected versions have been published.

Timeline

Published: Jun 2, 2026
Last modified: Jul 22, 2026
NVD status: Analyzed

Related CVEs from 2026

CVE-2026-959045.5Buffer over-read in Windows Event Logging Service allows an authorized attacker to disclose information locally.CVE-2026-95916.9Cross-site request forgery (CSRF) in NewsItemApiController in SimplCommerce prior to commit 6233d73e allows an unauthenticated remote attack CVE-2026-95927.5SEPPmail Secure Email Gateway & SEPPmail Cloud before version 15.0.4.2 allows an attacker to replay & hijack a user session in the GINA web CVE-2026-959247.3A vulnerability has been found in SourceCodester Online Reviewer Management System 1.0. Impacted is an unknown function of the file /reviewe CVE-2026-959257.3A vulnerability was found in SourceCodester Online Reviewer Management System 1.0. The affected element is an unknown function of the file /CVE-2026-959267.3A vulnerability was determined in SourceCodester Online Reviewer Management System 1.0. The impacted element is an unknown function of the f CVE-2026-959277.3A vulnerability was identified in SourceCodester Online Reviewer Management System 1.0. This affects an unknown function of the file /review CVE-2026-959285.5A security flaw has been discovered in recommenders-team recommenders up to 1.2.1. This impacts the function pickle.load of the file recomme CVE-2026-959296.3A weakness has been identified in iFlytek astron-agent up to 1.0.7. Affected is an unknown function of the file console/backend/commons/src/CVE-2026-95936.7A vulnerability in the iDTM FDI allows an attacker with elevated privileges and access to the host system to enable the debug interface by p CVE-2026-959306.3A security vulnerability has been detected in iFlytek astron-agent up to 1.0.6. Affected by this vulnerability is the function UrlCheckTool.CVE-2026-95944.4The WP Maps – Google Maps,OpenStreetMap,Mapbox,Store Locator,Listing,Directory & Filters plugin for WordPress is vulnerable to Stored Cross-