Incorrect authorization in the Devolutions Gateway token generation in Devolutions Server 2026.3.10.0 and earlier allows an authenticated non-administrative attacker to bypass the Network Access Rules of a virtual gateway and reach denied hosts via wildcard additional destinations signed into the gateway token.
CVE-2026-114486
NONE
EPSS 0.14%
Updated Oct 22, 2026
Incorrect
CVE Details
CVE ID
CVE-2026-114486
Published Date
Oct 22, 2026
Vendor
Incorrect
Severity
NONE
Exploit Prediction (EPSS)
Probability of Exploit
0.14%
Likelihood of exploitation in next 30 days
Percentile:
3.1th percentile (higher than 3.1% of all CVEs)
Standard patching cycle
Impact
Minimal impact
Source
View Advisory