PT-2026-58675 · Devolutions · Server
Published
2026-07-14
·
Updated
2026-07-14
·
CVE-2026-15637
None
No severity ratings or metrics are available. When they are, we'll update the corresponding info on the page.
Improper authorization in the PAM SSH key and certificate retrieval
endpoints in Devolutions Server 2026.2.11, 2026.1.22 allows an
authenticated low-privileged user to disclose the private key of an SSH
key or certificate PAM credential via a direct object reference to the
credential identifier.
IDOR
Found an issue in the description? Have something to add? Feel free to write us 👾
Weakness Enumeration
Related Identifiers
Affected Products
Server