CVE-2026-93330 PUBLISHED

Assigner: DEVOLUTIONS
Reserved: 17.09.2026 Published: 29.09.2026 Updated: 29.09.2026

Improper rule enforcement in the PAM Active Directory provider in Devolutions Server 2026.3.5 allows a user with PAM edit permissions to bypass the Devolutions Gateway host ruleset.

Product Status

Vendor Devolutions
Product Server
Versions Default: unaffected
  • affected from 0 to 2026.3.7.0 (excl.)

References

Problem Types

  • CWE-696 Incorrect Behavior Order CWE