https://vulnerability.circl.lu/rss/recent/all/10 Most recent entries from all 2026-10-02T15:45:37.101614+00:00 Vulnerability-Lookup info@circl.lu python-feedgen Contains only the most 10 recent entries. https://vulnerability.circl.lu/vuln/fkie_cve-2026-100287 fkie_cve-2026-100287 2026-10-02T15:45:37.104302+00:00

Missing authorization in the attachment history API in Devolutions Server 2026.3.5.0 and earlier allows an authenticated low-privileged user to permanently delete or restore vault attachments via a crafted API request.

 https://vulnerability.circl.lu/vuln/ghsa-frpv-43q4-j2gm GHSA-frpv-43q4-j2gm 2026-10-02T15:45:37.104409+00:00

Missing authorization in the attachment history API in Devolutions Server 2026.3.5.0 and earlier allows an authenticated low-privileged user to permanently delete or restore vault attachments via a crafted API request.