CVE-2026-15637 [HIGH] – Improper authorization in the PAM SSH key and certificate retrieval endpoints in Devoluti

Improper authorization in the PAM SSH key and certificate retrieval
endpoints in Devolutions Server 2026.2.11, 2026.1.22 allows an
authenticated low-privileged user to disclose the private key of an SSH
key or certificate PAM credential via a direct object reference to the
credential identifier.