CVE-2026-9047General(devolutions / devolutions_server)

LOWCVSS 7.6 · HIGH

Signal is active with 1 mentions in latest observed window

Immediate actions

  • Track advisory updates for patch or workaround availability

Recommended action window: Monitor and triage in normal cycle

NVD description

Improper handling of factor key state in the multi-factor authentication management feature in Devolutions Server allows an attacker with knowledge of a user's password to bypass the user's multi-factor authentication after the user reconfigures their factors. This issue affects : * Devolutions Server 2026.1.6.0 through 2026.1.16.0

0.0/ 10 priority

Sources & remediation

Weakness type (CWE)
CWE-305

Priority

LOW

Exploitation

NONE

PoC

NONE

Patch

NONE

Momentum

NONE

Are you affected?

If you run products in this scope, you should treat this CVE as relevant to your environment.

  • devolutions_server

Threat summary

  • 1 mentions across 1 observed day

What's happening

  • General: 1 classified signal
  • 1 total mentions across 1 day

Affected systems

Products
devolutions_server

Deep dive

Activity timeline1 mentions / 1d
00111Mentions · 2026-06-08: 106-08
Signal classification1 categories
General
1100.0%
Referenced assets1 URL
Full discourse1 post
  • ケイ | IT・セキュリティ系副業Webライター@Teeeda_worker
    General

    CVE-2026-9047 Devolutions Server 2026.1.6.0 through 2026.1.16.0の脆弱性をわかりやすく解説|影響範囲と対策まとめ https://www.cybernote.click/2026/06/06/cve-2026-9047-devolutions-server-2026160-through-20261160/ #IT #Security #cybersecurity

    Post summary

    The post simply references CVE-2026-9047 and links to an article that promises an easy explanation and countermeasures, without providing concrete technical or exploit details.

    0000048
    209 followersView on X
CPE platform detail1 entries

1 of 1 entries

PartVendorProductVersionTarget SWTarget HW
Appdevolutionsdevolutions_server---

Explore more