CVE-2026-11890

None

CVSS

—

EPSS

0.2%

Published

Jun 16, 2026

CISA due date

—

The record

Improper access control in PAM account discovery results in Devolutions Server 2026.2.5, 2026.1.21 allows an authenticated user to retrieve account discovery scan results.

Affected packages

Ecosystem	Package	Introduced	Fixed