Question 1

What is CVE-2026-114487 — CVE-2026-114487?

Accepted Answer

Missing authorization in the PAM AD computer import endpoint in Devolutions Server 2026.3.5.0 through 2026.3.10.0 and 2026.2.20.0 and earlier allows an authenticated non-administrative user with a PAM license to create PAM sub-providers under existing AD providers via a crafted import request.

Question 2

What is the authoritative source for CVE-2026-114487?

Accepted Answer

CVE-2026-114487 (CVE-2026-114487) is catalogued in NVD + CISA KEV + FIRST EPSS and curated for EU compliance use cases by SQUR.

CVE-2026-114487CVE-2026-114487

Description

Scoring