CVE-2026-10787
Severity CVSS v4.0:
Pending analysis
Type:
Unavailable / Other
Publication date:
08/06/2026
Last modified:
08/06/2026
Description
Missing authorization in the deleted user groups API in Devolutions Server allows an authenticated low-privileged user to enumerate metadata of deleted user groups via a crafted API request.<br />
<br />
This issue affects :<br />
<br />
* Devolutions Server 2026.2.4.0<br />
* Devolutions Server 2026.1.20.0 and earlier