CyberRota
Back to database

CVE-2026-6706

MEDIUM · CVSS 6.5 EPSS 0.03%

Source: NVD + CISA KEV + EPSS · Published: 2026-04-28 · Last synced: 2026-05-28

CyberRota Analysis

Detaylı analiz gerekiyor.

CVE
CVE-2026-6706
Severity
MEDIUM
CVSS
6.5
EPSS
0.03%

Original NVD Description

Improper access control in the vault documentation feature in Devolutions Server allows an authenticated attacker to read documentation content from unauthorized vaults via a crafted API request. This issue affects Server: from 2026.1.6.0 through 2026.1.14.0, through 2025.3.18.0.