CVE-2026-110804

LOWCVSS 4.3 · MEDIUM

Immediate actions

Track advisory updates for patch or workaround availability

Recommended action window: Monitor and triage in normal cycle

NVD description

Improperly controlled modification of JIT elevation settings in PAM checkout in Devolutions Server 2026.3.8.0 and earlier allows an authenticated user with PAM checkout access to delete arbitrary Active Directory groups or retain elevated privileges via client-supplied JIT elevation settings in a checkout update request.

Back to dashboard

0.0/ 10 priority

Sources & remediation

Other references

https://devolutions.net/security/advisories/DEVO-2026-0036/

Weakness type (CWE)

CWE-915

Priority

LOW

Exploitation

NONE

PoC

NONE

Patch

NONE

Momentum

NONE

Deep dive

Full discourse1 post

CVE@CVEnew1d
CVE-2026-110804 Improperly controlled modification of JIT elevation settings in PAM checkout in Devolutions Server 2026.3.8.0 and earlier allows an authenticated user with PAM chec… https://www.cve.org/CVERecord?id=CVE-2026-110804
00000581
58.2K followersView on X

Explore more

Back to dashboard