CVE-2026-100287 | Devolutions Server up to 2026.3.5.0 Attachment History API improper authorization

September 29, 2026 Yanac

A vulnerability marked as problematic has been reported in Devolutions Server up to 2026.3.5.0. Affected is an unknown function of the component Attachment History API. The manipulation leads to improper authorization.

This vulnerability is listed as CVE-2026-100287. The attack may be initiated remotely. There is no available exploit.

It is suggested to upgrade the affected component.VulDB Recent EntriesRead More