Is CVE-2026-93330 being exploited?

No public exploit is currently tracked.

How severe is CVE-2026-93330?

CVE-2026-93330 has a CVSS v3 severity of MEDIUM (4.3).

Back

CVE-2026-93330

Description

Improper rule enforcement in the PAM Active Directory provider in Devolutions Server 2026.3.5 allows a user with PAM edit permissions to bypass the Devolutions Gateway host ruleset.