Feed/CVE-2026-105485
CVE-2026-105485MEDIUMCVSS 6.8

CVE-2026-105485

Published Oct 6, 2026·Updated Oct 6, 2026

NVD Description

Authentication bypass OAuth device authorization flow in Devolutions Server 2026.3.7.0 and earlier allows a remote attacker to take over a user's account via replay of a captured device verification link by an authenticated victim.

References

View on NVD Search GitHub Search Google

Get alerted for CVEs like this

Register your stack and get notified within minutes when a matching CVE drops.

Start monitoring free