Back to search
CVE-2026-4924
Published: Apr 1, 2026
Modified: Apr 1, 2026
PUBLISHED
Description
Improper authentication in the two-factor authentication (2FA) feature in Devolutions Server 2026.1.11 and earlier allows a remote attacker with valid credentials to bypass multifactor authentication and gain unauthorized access to the victim account via reuse of a partially authenticated session token.
| Vendor | Product | Versions |
|---|---|---|
Devolutions | Server | affected 0 - <= 2026.1.11 |
Weaknesses (CWE)
Security Training
Train your team to recognize and prevent security threats with our comprehensive security awareness program.
Start TrainingVulnerability Scanning
Discover vulnerabilities in your applications and infrastructure before attackers do.
Scan Now