Critical · 9.8 CVE-2026-0610 EUVD-2026-3221GHSA-j6g4-5fgx-rfw5

SQL Injection vulnerability in remote-sessions in Devolutions Server.This issue affects Devolutions Server 2025.3.1 through 2025.3.12

Published Jan 19, 2026 · Updated Jan 20, 2026 · Assigned by DEVOLUTIONS

Vendor: Devolutions Product: Server

Description

SQL Injection vulnerability in remote-sessions in Devolutions Server.This issue affects Devolutions Server 2025.3.1 through 2025.3.12

Affected products

Vendor	Product	Affected	Fixed
Devolutions	Server	2025.3.1 – ≤ 2025.3.12	—

Advisories 1

WID-SEC-2026-0150 Devolutions Server: Mehrere Schwachstellen BSI CERT-Bund (WID) · Jan 19, 2026

References

https://devolutions.net/security/advisories/DEVO-2026-0003/