CVE-2026-114486
NONE—CVSS v3
—CVSS v2
0.14%
EPSS (exploit probability)
CWE-863CWE
Description
Incorrect authorization in the Devolutions Gateway token generation in Devolutions Server 2026.3.10.0 and earlier allows an authenticated non-administrative attacker to bypass the Network Access Rules of a virtual gateway and reach denied hosts via wildcard additional destinations signed into the gateway token.
Affected routers (0)
No routers currently mapped to this CVE in our database.