Threats Tagged 'ghsa-837f-85w4-23xg'

1 threat

Threats Tagged 'ghsa-837f-85w4-23xg'
Severity	CVSS	Signals	Threat	Source	Published	Score and star
Medium	5.0	EPSS 0.2%	CVE-2026-100289Server · Missing Authorization Medium5.0EPSS 0.2%2026-09-29CVE Database V5CVE-2026-100289 Missing authorization in the gateway network scan token API in Devolutions Server 2026.3.5.0 and earlier allows an authenticated low-privileged user to generate a network scan token and perform internal network discovery and port scanning through the gateway via a crafted API request. EPSS 0.2%Vulnerability Devolutions #cwe-862 #ghsa-837f-85w4-23xg	CVE Database V5	2026-09-29

Showing 1–1 of 1 result