Skip to content
OpenAdvisories

Vendor

Devolutions

199 known vulnerabilities.

Products

Server 112 Remote Desktop Manager 49 Devolutions Server 17 PowerShell Universal 14 Workspace 2 Hub Reporting Service 1 UniGetUI 1 Password Manager 1 Gateway 1 Remote Desktop Manager PowerShell Module 1 Workspace Desktop 1 XTS.NET 1 DVLS (Devolutions Server) 1
All Critical High Medium Low Exploited only Public exploit

10 results · Clear filters · Feed

  • Critical 9.8
    CVE-2026-3130

    Improper Enforcement of Behavioral Controls in Devolutions Server 2025.3.15 and earlier allows an authenticated attacke…

    Devolutions Server
  • Critical 9.8
    CVE-2026-3204

    Improper input validation in the error message page in Devolutions Server 2025.3.16 and earlier allows remote attackers…

    Devolutions Server
  • Critical 9.8
    CVE-2026-2590

    Improper enforcement of the Disable password saving in vaults setting in the connection entry component in Devolutions …

    Devolutions Remote Desktop Manager
  • Critical 9.8
    CVE-2026-3224

    Authentication bypass in the Microsoft Entra ID (Azure AD) authentication mode in Devolutions Server 2025.3.15.0 and ea…

    Devolutions Server
  • Critical 9.8
    CVE-2026-0610

    SQL Injection vulnerability in remote-sessions in Devolutions Server.This issue affects Devolutions Server 2025.3.1 thr…

    Devolutions Server
  • Critical 9.0
    CVE-2025-11957

    Improper authorization in the temporary access workflow of Devolutions Server 2025.2.12.0 and earlier allows an authent…

    Devolutions Server
  • Critical 9.5
    CVE-2025-6523

    Use of weak credentials in emergency authentication component in Devolutions Server allows an unauthenticated attacker …

    Devolutions Server
  • Critical 9.8
    CVE-2024-6057

    Improper authentication in the vault password feature in Devolutions Remote Desktop Manager 2024.1.31.0 and earlier all…

    Devolutions Remote Desktop Manager
  • Critical 9.8
    CVE-2024-2921

    Improper access control in PAM vault permissions in Devolutions Server 2024.1.10.0 and earlier allows an authenticated …

    Devolutions Server
  • Critical 9.8
    CVE-2023-4373

    Inadequate validation of permissions when employing remote tools and macros within Devolutions Remote Desktop Manager v…

    Devolutions Remote Desktop Manager