CVE-2026-9223

Published: May 22, 2026

Modified: May 22, 2026

PUBLISHED

Description

Missing authorization in the vault import feature in Devolutions Server 2026.1.16.0 and earlier allows a low-privileged authenticated user to create new vaults via a crafted import request.

Vendor	Product	Versions
Devolutions	Server	affected `0 - <= 2026.1.16.0`

Weaknesses (CWE)

CWE-284

References

https://devolutions.net/security/advisories/DEVO-2026-0013/

Security Training

Train your team to recognize and prevent security threats with our comprehensive security awareness program.

Start Training

Vulnerability Scanning

Discover vulnerabilities in your applications and infrastructure before attackers do.

Scan Now

CVE-2026-9223

Description

Affected Products

Weaknesses (CWE)

References