CVE-2026-5171: Medium severity Devolutions Devolutions Server vulnerability
Improper access control in the entry activity log feature in Devolutions Server allows an authenticated user with access to an entry but without the required permission to retrieve that entry's activity logs via a crafted API request.
This issue affects :
Devolutions Server 2026.1.6.0 through 2026.1.16.0 Devolutions Server 2025.3.20.0 and earlier
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2026-5171?
CVE-2026-5171 has a risk rating of 40, indicating a significant security issue.
How do I fix CVE-2026-5171?
To fix CVE-2026-5171, ensure you update Devolutions Server to version 2026.1.7.0 or later where the vulnerability is addressed.
Who is affected by CVE-2026-5171?
CVE-2026-5171 affects authenticated users of Devolutions Server versions 2026.1.6.0 through 2026.1.6.x who have access to entry logs without the proper permissions.
What type of vulnerability is CVE-2026-5171?
CVE-2026-5171 is an improper access control vulnerability found in the entry activity log feature of Devolutions Server.
When was CVE-2026-5171 published?
CVE-2026-5171 was published on May 22, 2026.