cvedb.io
CVE-2026-9047
HIGH · CVSS 7.6
EPSS exploitation probability: 0%
Published 2026-05-22T16:16:23.533 · Last modified 2026-06-17T11:04:46.160

Summary

Improper handling of factor key state in the multi-factor authentication management feature in Devolutions Server allows an attacker with knowledge of a user's password to bypass the user's multi-factor authentication after the user reconfigures their factors. This issue affects : * Devolutions Server 2026.1.6.0 through 2026.1.16.0

Affected products

devolutions — devolutions_server

Does this affect you?

Add your gear to cvedb and we'll alert you only when devolutions ships something exploited.

Check my exposure →

References

This product uses data from the NVD API but is not endorsed or certified by the NVD. Informational only; not professional security advice.