https://vulnerability.circl.lu/rss/recent/all/10 Most recent entries from all 2026-09-30T21:13:53.849730+00:00 Vulnerability-Lookup info@circl.lu python-feedgen Contains only the most 10 recent entries. https://vulnerability.circl.lu/vuln/cve-2026-17569 CVE-2026-17569 2026-09-30T21:13:53.869526+00:00

Affected: Devolutions Server

Improper access control in the NetBox synchronizer in Devolutions Server allows an authenticated user with view-only permission on an entry to obtain a stored API token via the partial connection endpoint.

This issue affects :

* Devolutions Server 2026.2.4.0 through 2026.2.12.0 * Devolutions Server 2026.1.23.0 and earlier