CyberRota Analysis
This is a medium severity vulnerability with a CVSS score of 5.4. Exploitation may require the attacker to be authenticated.
CVE
CVE-2026-4829
Severity
MEDIUM
CVSS
5.4
EPSS
0.17%
Original NVD Description
Improper authentication in the external OAuth authentication flow in Devolutions Server 2026.1.11 and earlier allows an authenticated user to authenticate as other users, including administrators, via reuse of a session code from an external authentication flow.
Related CVEs
Other vulnerabilities affecting the same vendor(s)