high8.2
CVE-2026-4828
Improper authentication in the OAuth login functionality in Devolutions Server 2026.1.11 and earlier allows a remote attacker with valid credentials to bypass …
Impact
Improper authentication in the OAuth login functionality in Devolutions Server 2026.1.11 and earlier allows a remote attacker with valid credentials to bypass multi-factor authentication via a crafted login request.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Devolutions | Devolutions Server | before 2025.3.18.0 from 2026.1.1.0 before 2026.1.12.0 |