Missing authorization in the PAM AD computer import endpoint in Devolutions Server 2026.3.5.0 through 2026.3.10.0 and 2026.2.20.0 and earlier allows an authenticated non-administrative user with a PAM license to create PAM sub-providers under existing AD providers via a crafted import request.
CVE-2026-114487
NONE
EPSS 0.13%
Updated Oct 22, 2026
Missing
CVE Details
CVE ID
CVE-2026-114487
Published Date
Oct 22, 2026
Vendor
Missing
Severity
NONE
Exploit Prediction (EPSS)
Probability of Exploit
0.13%
Likelihood of exploitation in next 30 days
Percentile:
2.8th percentile (higher than 2.8% of all CVEs)
Standard patching cycle
Impact
Minimal impact
Source
View Advisory