Server

27 results · Clear filters · Feed

• High 8.8
  CVE-2026-119636

  Improper release of expired privileged access checkouts in the PAM scheduled check-in task in Devolutions Server 2025.3…

  Devolutions Server
  Nov 3, 2026
• High 8.1
  CVE-2026-120715

  Server-side request forgery in the Active Directory credential validation in Devolutions Server 2026.3.12.0 and earlier…

  Devolutions Server
  Nov 3, 2026
• High 7.5
  CVE-2026-120733

  Cleartext storage of sensitive information in the user account data in Devolutions Server 2026.3.12.0 and earlier allow…

  Devolutions Server
  Nov 3, 2026
• High 8.1
  CVE-2026-121580

  Server-side request forgery in the Jira ticketing filter lookup in Devolutions Server 2026.2.22.0 and earlier allows an…

  Devolutions Server
  Nov 3, 2026
• High 7.1
  CVE-2026-105488

  Missing authorization in the global vault in Devolutions Server 2026.3.7.0 and earlier allows an authenticated user wit…

  Devolutions Server
  Oct 6, 2026
• High 7.2
  CVE-2026-100288

  Cleartext storage of sensitive information in the database in Devolutions Server 2026.3.5.0 and earlier allows an attac…

  Devolutions Server
  Sep 29, 2026
• High 8.3
  CVE-2026-13327

  Improper certificate validation on LDAPS connections to Active Directory in Devolutions Server 2026.2.16 and earlier al…

  Devolutions Server
  Sep 15, 2026
• High 8.8
  CVE-2026-17568

  Improper access control in the role membership management endpoint in Devolutions Server allows an authenticated non-ad…

  Devolutions Server
  Jul 27, 2026
• High 7.1
  CVE-2026-15641

  Improper authorization in the access request status endpoint in Devolutions Server 2026.2.11, 2026.1.22 allows an authe…

  Devolutions Server
  Jul 14, 2026
• High 7.5
  CVE-2026-15637

  Improper authorization in the PAM SSH key and certificate retrieval endpoints in Devolutions Server 2026.2.11, 2026.1.2…

  Devolutions Server
  Jul 14, 2026
• High 7.3
  CVE-2026-14536

  Improper enforcement of a mandatory multi-factor authentication policy in Devolutions Server 2026.2.9.0 allows an attac…

  Devolutions Server
  Jul 6, 2026
• High 7.1
  CVE-2026-7325

  Improper authorization in the Active Directory browsing feature in Devolutions Server allows a low-privileged authentic…

  Devolutions Server
  May 22, 2026
• High 7.6
  CVE-2026-9047

  Improper handling of factor key state in the multi-factor authentication management feature in Devolutions Server allow…

  Devolutions Server
  May 22, 2026
• High 8.2
  CVE-2026-4924

  Improper authentication in the two-factor authentication (2FA) feature in Devolutions Server 2026.1.11 and earlier allo…

  Devolutions Server
  Apr 1, 2026
• High 8.2
  CVE-2026-4828

  Improper authentication in the OAuth login functionality in Devolutions Server 2026.1.11 and earlier allows a remote at…

  Devolutions Server
  Apr 1, 2026
• High 8.1
  CVE-2026-4434

  Improper certificate validation in the PAM propagation WinRM connections allows a network attacker to perform a man-in-…

  Devolutions Server
  Mar 20, 2026
• High 7.6
  CVE-2026-1007

  Incorrect Authorization vulnerability in virtual gateway component in Devolutions Server allows attackers to bypass den…

  Devolutions Server
  Jan 19, 2026
• High 8.8
  CVE-2025-13757

  SQL Injection vulnerability in last usage logs in Devolutions Server.This issue affects Devolutions Server: through 202…

  Devolutions Server
  Nov 27, 2025
• High 8.8
  CVE-2025-12485

  Improper privilege management during pre-MFA cookie handling in Devolutions Server allows a low-privileged authenticate…

  Devolutions Server
  Nov 6, 2025
• High 7.1
  CVE-2025-8312

  Deadlock in PAM automatic check-in feature in Devolutions Server allows a password to remain valid beyond the end of it…

  Devolutions Server
  Jul 30, 2025
• High 7.1
  CVE-2025-6741

  Improper access control in secure message component in Devolutions Server allows an authenticated user to steal unautho…

  Devolutions Server
  Jul 22, 2025
• High 8.7
  CVE-2025-4433

  Improper access control in user group management in Devolutions Server 2025.1.7.0 and earlier allows a non-administrati…

  Devolutions Server
  May 30, 2025
• High 8.1
  CVE-2025-2280

  Improper access control in web extension restriction feature in Devolutions Server 2024.3.4.0 and earlier allows an aut…

  Devolutions Server
  Mar 13, 2025
• High 7.5
  CVE-2025-2277

  Exposure of password in web-based SSH authentication component in Devolutions Server 2024.3.13 and earlier allows a use…

  Devolutions Server
  Mar 13, 2025
• High 7.1
  CVE-2025-2003

  Incorrect authorization in PAM vaults in Devolutions Server 2024.3.12 and earlier allows an authenticated user to bypas…

  Devolutions Server
  Mar 5, 2025
• High 8.8
  CVE-2024-2915

  Improper access control in PAM JIT elevation in Devolutions Server 2024.1.6 and earlier allows an attacker with access …

  Devolutions Server
  Mar 26, 2024
• High 7.6
  CVE-2024-1764

  Improper privilege management in Just-in-time (JIT) elevation module in Devolutions Server 2023.3.14.0 and earlier allo…

  Devolutions Server
  Mar 5, 2024