CyberRota Analysis
AI-GeneratedDevolutions Server 2026.2.9.0 has a vulnerability that allows attackers with valid user credentials to bypass mandatory multi-factor authentication (MFA) due to improper enforcement of MFA policies. This flaw arises when the server encounters an invalid default MFA value, potentially enabling unauthorized access to sensitive systems. Organizations using this version of Devolutions Server should prioritize patching to mitigate the risk of credential misuse and unauthorized access.
Original NVD Description
Improper enforcement of a mandatory multi-factor authentication policy in Devolutions Server 2026.2.9.0 allows an attacker with valid user credentials to bypass the MFA Required policy and authenticate without completing multi-factor authentication. The problem occurs when DVLS encounters an invalid default MFA value.
Related CVEs
Other vulnerabilities affecting the same vendor(s)