This vulnerability (CVE-2026-9247) affects Devolutions Server's entry export feature by failing to log or notify administrators when a sealed entry is exported by an authenticated user with export permissions. The lack of sufficient logging (CWE-778) means that such exports can occur without alerting administrators, potentially allowing unauthorized data access to go unnoticed. The issue impacts specific versions of Devolutions Server as listed, and no CVSS score or vendor remediation level is currently available.

The impact is primarily a reduction in audit and monitoring capabilities, as administrators are not notified when sealed entries are exported by authorized users. This could allow sensitive information to be extracted without detection, increasing the risk of data exposure. However, exploitation requires authenticated access with export permissions, limiting the scope of potential attackers.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is released, organizations should review and possibly restrict export permissions to trusted users only and monitor for unusual export activity through other means if possible.