Is CVE-2026-114486 being exploited?

No public exploit is currently tracked.

Back

CVE-2026-114486

Description

Incorrect authorization in the Devolutions Gateway token generation in Devolutions Server 2026.3.10.0 and earlier allows an authenticated non-administrative attacker to bypass the Network Access Rules of a virtual gateway and reach denied hosts via wildcard additional destinations signed into the gateway token.