Description
Authentication bypass in the Microsoft Entra ID (Azure AD) authentication mode in Devolutions Server 2025.3.15.0 and earlier allows an unauthenticated user to authenticate as an arbitrary Entra ID user via a forged JSON Web Token (JWT).
INFO
Published Date :
2026-03-03T21:21:27.611Z
Last Modified :
2026-03-03T21:21:27.611Z
Source :
DEVOLUTIONS
AFFECTED PRODUCTS
The following products are affected by CVE-2026-3224 vulnerability.
No data.
REFERENCES
Here, you will find a curated list of external links that provide in-depth information to CVE-2026-3224.
