Signal is active with 2 mentions in latest observed window
Recommended action window: Monitor and triage in normal cycle
NVD description
Improper Enforcement of Behavioral Controls in Devolutions Server 2025.3.15 and earlier allows an authenticated attacker with the delete permission to delete a PAM account that is currently checked out by selecting it alongside at least one non-checked-out account and performing a bulk deletion.
Priority
LOW
Exploitation
NONE
PoC
NONE
Patch
NONE
Momentum
STABLE
If you run products in this scope, you should treat this CVE as relevant to your environment.
CVE-2026-3130 Improper PAM Account Deletion Control in Devolutions Server 2025.3.15 and Earlier https://vulmon.com/vulnerabilitydetails?qid=CVE-2026-3130
Post summary
A new vulnerability (CVE-2026-3130) affecting Devolutions Server 2025.3.15 and earlier has been disclosed, highlighting improper PAM account deletion control.
🔴 CVE-2026-3130 - Critical Improper Enforcement of Behavioral Controls in Devolutions Server 2025.3.15 and earlier allows an authenticated attacker with the delete permission to delete a PAM account that is current... https://www.thehackerwire.com/vulnerability/CVE-2026-3130/ https://t.co/lNltGbHzWv
Post summary
The text announces CVE-2026-3130 as a critical flaw in Devolutions Server, noting that an attacker with delete privileges can delete a PAM account due to improper enforcement of behavioral controls.
🚨*CVE* CVE-2026-3130 Improper Enforcement of Behavioral Controls in Devolutions Server 2025.3.15 and earlier allows an authenticated attacker with the delete permission to delete a PAM acco… https://www.cve.org/CVERecord?id=CVE-2026-3130 ----- Traducción: CVE-2026-3130 Apl… http://infoflow.cloud`
Post summary
The tweet announces CVE‑2026‑3130 for Devolutions Server 2025.3.15 and earlier, noting that authenticated users with delete rights can delete a PAM account due to improper enforcement of behavioral controls.
CVE-2026-3130 Improper Enforcement of Behavioral Controls in Devolutions Server 2025.3.15 and earlier allows an authenticated attacker with the delete permission to delete a PAM acco… https://www.cve.org/CVERecord?id=CVE-2026-3130
Post summary
CVE-2026-3130 is a vulnerability in Devolutions Server that allows an authenticated user with delete permission to delete PAM accounts due to improper enforcement of behavioral controls.
1 of 1 entries
| Part | Vendor | Product | Version | Target SW | Target HW |
|---|---|---|---|---|---|
| App | devolutions | devolutions_server | - | - | - |