Skip to content
OpenAdvisories

Product · Devolutions

Server

112 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

7 results · Clear filters · Feed

  • Critical 9.8
    CVE-2026-3130

    Improper Enforcement of Behavioral Controls in Devolutions Server 2025.3.15 and earlier allows an authenticated attacke…

    Devolutions Server
  • Critical 9.8
    CVE-2026-3204

    Improper input validation in the error message page in Devolutions Server 2025.3.16 and earlier allows remote attackers…

    Devolutions Server
  • Critical 9.8
    CVE-2026-3224

    Authentication bypass in the Microsoft Entra ID (Azure AD) authentication mode in Devolutions Server 2025.3.15.0 and ea…

    Devolutions Server
  • Critical 9.8
    CVE-2026-0610

    SQL Injection vulnerability in remote-sessions in Devolutions Server.This issue affects Devolutions Server 2025.3.1 thr…

    Devolutions Server
  • Critical 9.0
    CVE-2025-11957

    Improper authorization in the temporary access workflow of Devolutions Server 2025.2.12.0 and earlier allows an authent…

    Devolutions Server
  • Critical 9.5
    CVE-2025-6523

    Use of weak credentials in emergency authentication component in Devolutions Server allows an unauthenticated attacker …

    Devolutions Server
  • Critical 9.8
    CVE-2024-2921

    Improper access control in PAM vault permissions in Devolutions Server 2024.1.10.0 and earlier allows an authenticated …

    Devolutions Server