CVE-2026-100286 – Missing authorization in the data source settings API in Devolutions Server 2026.3.5.0 and

Missing authorization in the data source settings API in Devolutions Server 2026.3.5.0 and earlier allows an authenticated non-administrative user to disclose integration secrets via a crafted API request.