PT-2026-29538 · Devolutions · Server
Published
2026-04-01
·
Updated
2026-04-01
·
CVE-2026-4924
None
No severity ratings or metrics are available. When they are, we'll update the corresponding info on the page.
Improper
authentication in the two-factor authentication (2FA) feature in
Devolutions Server 2026.1.11 and earlier allows a remote attacker with valid
credentials to bypass multifactor authentication and gain unauthorized
access to the victim account via reuse of a partially authenticated
session token.
Found an issue in the description? Have something to add? Feel free to write us 👾
Weakness Enumeration
Related Identifiers
Affected Products
Server