Monthly
Improper access control in Devolutions Server's PAM account discovery module allows any authenticated low-privilege user to retrieve privileged account discovery scan results they are not authorized to view. Two maintenance branches are affected - versions prior to 2026.2.5 and 2026.1.21 - with vendor-released patches available via Devolutions advisory DEVO-2026-0017. No public exploit exists and EPSS sits at 0.14% (4th percentile), but the sensitivity of PAM account inventories in enterprise environments elevates the real-world impact beyond what the CVSS Medium rating alone conveys.
A Missing Authorization issue was discovered in Rockwell Automation PanelView Plus 6 700-1500 6.00.04, 6.00.05, 6.00.42, 6.00-20140306, 6.10.20121012, 6.10-20140122, 7.00-20121012, 7.00-20130108,. Rated high severity (CVSS 8.6), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Epss exploitation probability 12.6% and no vendor patch available.
Improper access control in Devolutions Server's PAM account discovery module allows any authenticated low-privilege user to retrieve privileged account discovery scan results they are not authorized to view. Two maintenance branches are affected - versions prior to 2026.2.5 and 2026.1.21 - with vendor-released patches available via Devolutions advisory DEVO-2026-0017. No public exploit exists and EPSS sits at 0.14% (4th percentile), but the sensitivity of PAM account inventories in enterprise environments elevates the real-world impact beyond what the CVSS Medium rating alone conveys.
A Missing Authorization issue was discovered in Rockwell Automation PanelView Plus 6 700-1500 6.00.04, 6.00.05, 6.00.42, 6.00-20140306, 6.10.20121012, 6.10-20140122, 7.00-20121012, 7.00-20130108,. Rated high severity (CVSS 8.6), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Epss exploitation probability 12.6% and no vendor patch available.