CVE-2026-9223 - AskarLabs CVE Database

CVE-2026-9223

Vendor Devolutions

Product Server

Weakness CWE-284

Published May 22, 2026

Last update May 22, 2026

View on NVD All CVEs

CVSS base score

—

What the vulnerability does

01Description

Missing authorization in the vault import feature in Devolutions Server 2026.1.16.0 and earlier allows a low-privileged authenticated user to create new vaults via a crafted import request.

Key dates

02Disclosure timeline

May 22, 2026 CVE published

May 22, 2026 Record updated

External resources

03References

NVD — National Vulnerability Database https://nvd.nist.gov/vuln/detail/CVE-2026-9223 CWE — Common Weakness Enumeration https://cwe.mitre.org/data/definitions/284.html