UNKNOWNCVSS not yet scoredVulnerability

CVE-2026-114487

Missing authorization in the PAM AD computer import endpoint in Devolutions Server 2026.3.5.0 through 2026.3.10.0 and 2026.2.20.0 and earlier allows an authenticated non-administrative user with a PAM license to create PAM sub-providers under existing AD providers via a crafted import request.

Properties

Last source
NVD
Nvd fetched at
2026-10-22T22:14:18.200859+00:00
Cve id
CVE-2026-114487
First seen by Signal
2026-10-22T18:12:34+00:00
Retrieved at
2026-10-22T22:16:40+00:00
Published at
2026-10-22T16:17:34.757
Last modified
2026-10-22T16:54:17.390

Related Entities (1)

HAS_WEAKNESS (1)

Explore deeper with Ninja Signal's threat intelligence graph

CVE-2026-114487 — Ninja Signal Threat Intelligence | Ninja Signal