# Devolutions Remote Desktop Manager. Every CVE that names Devolutions Remote Desktop Manager among its affected products, newest first. Vendors and products are as the CNA wrote them. ## Records, newest first - [Insufficient verification of data authenticity in Devolutions Remote Desktop Manager](https://agentprime.io/advisories/CVE-2026-78417.md) `CVE-2026-78417` · CVE record: Devolutions Remote Desktop Manager · CVSS 4.3 Medium · Not analysed yet · Published 24 Aug 2026 · Tags: CWE-345 - [Devolutions Remote Desktop Manager: Incorrect link resolution by display name in the custom PowerShell VPN editor in…](https://agentprime.io/advisories/CVE-2026-13372.md) `CVE-2026-13372` · CVE record: Devolutions Remote Desktop Manager · CVSS 7.2 High · Not analysed yet · Published 26 Jun 2026 · Tags: CWE-706 - [Improper certificate validation in Devolutions Remote Desktop Manager](https://agentprime.io/advisories/CVE-2026-12162.md) `CVE-2026-12162` · CVE record: Devolutions Remote Desktop Manager · CVSS 5.5 Medium · Not analysed yet · Published 15 Jun 2026 · Tags: Weak cryptography or TLS - [OS command injection in Devolutions Remote Desktop Manager](https://agentprime.io/advisories/CVE-2026-12161.md) `CVE-2026-12161` · CVE record: Devolutions Remote Desktop Manager · CVSS 8.8 High · Not analysed yet · Published 15 Jun 2026 · Tags: Command injection - [Improper certificate validation in Devolutions Remote Desktop Manager](https://agentprime.io/advisories/CVE-2026-2590.md) `CVE-2026-2590` · CVE record: Devolutions Remote Desktop Manager · CVSS 9.8 Critical · Critical (CVSS 9+) · Not analysed yet · Published 3 Mar 2026 · Tags: Weak cryptography or TLS - [Information disclosure in Devolutions Remote Desktop Manager](https://agentprime.io/advisories/CVE-2026-0747.md) `CVE-2026-0747` · CVE record: Devolutions Remote Desktop Manager · CVSS 3.3 Low · Not analysed yet · Published 8 Jan 2026 · Tags: Information disclosure - [Information disclosure in Devolutions Server and others](https://agentprime.io/advisories/CVE-2025-13683.md) `CVE-2025-13683` · CVE record: Devolutions Server and 1 more · CVSS 6.5 Medium · Not analysed yet · Published 28 Nov 2025 · Tags: Information disclosure - [Exposure of personal information in Devolutions Remote Desktop Manager](https://agentprime.io/advisories/CVE-2025-5334.md) `CVE-2025-5334` · CVE record: Devolutions Remote Desktop Manager · CVSS 7.5 High · Not analysed yet · Published 29 May 2025 · Tags: Information disclosure - [Improper authorization in Devolutions Remote Desktop Manager](https://agentprime.io/advisories/CVE-2025-2600.md) `CVE-2025-2600` · CVE record: Devolutions Remote Desktop Manager · CVSS 6.8 Medium · Not analysed yet · Published 26 Mar 2025 · Tags: Broken access control - [Devolutions Remote Desktop Manager: Insufficient logging in the autotyping feature in Devolutions Remote Desktop Manager on…](https://agentprime.io/advisories/CVE-2025-2562.md) `CVE-2025-2562` · CVE record: Devolutions Remote Desktop Manager · CVSS 5.4 Medium · Not analysed yet · Published 26 Mar 2025 · Tags: CWE-778 - [Improper authorization in Devolutions Remote Desktop Manager](https://agentprime.io/advisories/CVE-2025-2528.md) `CVE-2025-2528` · CVE record: Devolutions Remote Desktop Manager · CVSS 3.6 Low · Not analysed yet · Published 26 Mar 2025 · Tags: Broken access control - [Improper access control in Devolutions Remote Desktop Manager](https://agentprime.io/advisories/CVE-2025-2499.md) `CVE-2025-2499` · CVE record: Devolutions Remote Desktop Manager · CVSS 5.4 Medium · Not analysed yet · Published 26 Mar 2025 · Tags: Broken access control - [Information disclosure in Devolutions Remote Desktop Manager](https://agentprime.io/advisories/CVE-2025-1636.md) `CVE-2025-1636` · CVE record: Devolutions Remote Desktop Manager · CVSS 6.5 Medium · Not analysed yet · Published 13 Mar 2025 · Tags: Information disclosure - [Information disclosure in Devolutions Remote Desktop Manager](https://agentprime.io/advisories/CVE-2025-1635.md) `CVE-2025-1635` · CVE record: Devolutions Remote Desktop Manager · CVSS 6.5 Medium · Not analysed yet · Published 13 Mar 2025 · Tags: Information disclosure - [Improper certificate validation in Devolutions Remote Desktop Manager](https://agentprime.io/advisories/CVE-2024-11621.md) `CVE-2024-11621` · CVE record: Devolutions Remote Desktop Manager · CVSS 8.8 High · Not analysed yet · Published 10 Feb 2025 · Tags: Weak cryptography or TLS - [Improper certificate validation in Devolutions Remote Desktop Manager](https://agentprime.io/advisories/CVE-2025-1193.md) `CVE-2025-1193` · CVE record: Devolutions Remote Desktop Manager · CVSS 8.1 High · Not analysed yet · Published 10 Feb 2025 · Tags: Weak cryptography or TLS - [Incorrect permission assignment in Devolutions Remote Desktop Manager](https://agentprime.io/advisories/CVE-2024-12149.md) `CVE-2024-12149` · CVE record: Devolutions Remote Desktop Manager · CVSS 8.1 High · Not analysed yet · Published 4 Dec 2024 · Tags: Broken access control - [Incorrect authorization in Devolutions Remote Desktop Manager](https://agentprime.io/advisories/CVE-2024-11670.md) `CVE-2024-11670` · CVE record: Devolutions Remote Desktop Manager · CVSS 5.4 Medium · Not analysed yet · Published 25 Nov 2024 · Tags: Broken access control - [Improper authentication in Devolutions Remote Desktop Manager](https://agentprime.io/advisories/CVE-2024-11671.md) `CVE-2024-11671` · CVE record: Devolutions Remote Desktop Manager · CVSS 5.4 Medium · Not analysed yet · Published 25 Nov 2024 · Tags: Authentication bypass - [Incorrect authorization in Devolutions Remote Desktop Manager](https://agentprime.io/advisories/CVE-2024-11672.md) `CVE-2024-11672` · CVE record: Devolutions Remote Desktop Manager · CVSS 4.3 Medium · Not analysed yet · Published 25 Nov 2024 · Tags: Broken access control - [Sensitive information in log files in Devolutions Remote Desktop Manager](https://agentprime.io/advisories/CVE-2024-7421.md) `CVE-2024-7421` · CVE record: Devolutions Remote Desktop Manager · CVSS 5.5 Medium · Not analysed yet · Published 25 Sept 2024 · Tags: Information disclosure - [Insufficiently protected credentials in Devolutions Remote Desktop Manager](https://agentprime.io/advisories/CVE-2024-6492.md) `CVE-2024-6492` · CVE record: Devolutions Remote Desktop Manager · CVSS 7.4 High · Not analysed yet · Published 16 Jul 2024 · Tags: Hard-coded credentials - [Devolutions Remote Desktop Manager: Improper access control in PAM dashboard in Devolutions Remote Desktop Manager 2024.2.11…](https://agentprime.io/advisories/CVE-2024-6354.md) `CVE-2024-6354` · CVE record: Devolutions Remote Desktop Manager · CVSS 7.2 High · Not analysed yet · Published 26 Jun 2024 · Tags: CWE-1262 - [Improper authentication in Devolutions Remote Desktop Manager](https://agentprime.io/advisories/CVE-2024-6057.md) `CVE-2024-6057` · CVE record: Devolutions Remote Desktop Manager · CVSS 9.8 Critical · Critical (CVSS 9+) · Not analysed yet · Published 17 Jun 2024 · Tags: Authentication bypass - [Devolutions Remote Desktop Manager: Improper removal of sensitive information in data source export feature in Devolutions…](https://agentprime.io/advisories/CVE-2024-6055.md) `CVE-2024-6055` · CVE record: Devolutions Remote Desktop Manager · CVSS 4.7 Medium · Not analysed yet · Published 17 Jun 2024 · Tags: CWE-212 - [Devolutions Server: Improper permission handling in the vault offline cache feature in Devolutions Remote…](https://agentprime.io/advisories/CVE-2024-3545.md) `CVE-2024-3545` · CVE record: Devolutions Server and 1 more · CVSS 4.3 Medium · Not analysed yet · Published 9 Apr 2024 · Tags: CWE-281 - [Incomplete cleanup in Devolutions Remote Desktop Manager](https://agentprime.io/advisories/CVE-2024-2403.md) `CVE-2024-2403` · CVE record: Devolutions Remote Desktop Manager · CVSS 5.9 Medium · Not analysed yet · Published 13 Mar 2024 · Tags: CWE-459 - [Cross-site scripting in Devolutions Remote Desktop Manager](https://agentprime.io/advisories/CVE-2024-0589.md) `CVE-2024-0589` · CVE record: Devolutions Remote Desktop Manager · CVSS 5.4 Medium · Not analysed yet · Published 31 Jan 2024 · Tags: Cross-site scripting (XSS) - [Incorrect authorization in Devolutions Remote Desktop Manager](https://agentprime.io/advisories/CVE-2023-7047.md) `CVE-2023-7047` · CVE record: Devolutions Remote Desktop Manager · No CVSS score · Not analysed yet · Published 21 Dec 2023 · Tags: Broken access control - [Devolutions Remote Desktop Manager: Client side permission bypass in Devolutions Remote Desktop Manager 2023.3.4.0 and…](https://agentprime.io/advisories/CVE-2023-6593.md) `CVE-2023-6593` · CVE record: Devolutions Remote Desktop Manager · No CVSS score · Not analysed yet · Published 12 Dec 2023 - [Devolutions Remote Desktop Manager: Code injection in Remote Desktop Manager 2023.3.9.3 and earlier on macOS allows an…](https://agentprime.io/advisories/CVE-2023-6288.md) `CVE-2023-6288` · CVE record: Devolutions Remote Desktop Manager · No CVSS score · Not analysed yet · Published 6 Dec 2023 - [Devolutions Remote Desktop Manager: Improper access control in the password analyzer feature in Devolutions Remote Desktop…](https://agentprime.io/advisories/CVE-2023-5765.md) `CVE-2023-5765` · CVE record: Devolutions Remote Desktop Manager · No CVSS score · Not analysed yet · Published 1 Nov 2023 - [Devolutions Remote Desktop Manager: A remote code execution vulnerability in Remote Desktop Manager 2023.2.33 and earlier on…](https://agentprime.io/advisories/CVE-2023-5766.md) `CVE-2023-5766` · CVE record: Devolutions Remote Desktop Manager · CVSS 8.8 High · Not analysed yet · Published 1 Nov 2023 - [Devolutions Remote Desktop Manager: Improper access controls in the entry duplication component in Devolutions Remote Desktop…](https://agentprime.io/advisories/CVE-2023-4417.md) `CVE-2023-4417` · CVE record: Devolutions Remote Desktop Manager · No CVSS score · Not analysed yet · Published 21 Aug 2023 - [Improper authentication in Devolutions Remote Desktop Manager](https://agentprime.io/advisories/CVE-2023-4373.md) `CVE-2023-4373` · CVE record: Devolutions Remote Desktop Manager · CVSS 9.8 Critical · Critical (CVSS 9+) · Not analysed yet · Published 21 Aug 2023 · Tags: Authentication bypass - [Devolutions Remote Desktop Manager: Improper access control in the Web Login listener in Devolutions Remote Desktop Manager…](https://agentprime.io/advisories/CVE-2023-2282.md) `CVE-2023-2282` · CVE record: Devolutions Remote Desktop Manager · CVSS 3.1 Low · Not analysed yet · Published 25 Apr 2023 - [No access control for the OTP key on OTP entries](https://agentprime.io/advisories/CVE-2023-1939.md) `CVE-2023-1939` · CVE record: Devolutions Remote Desktop Manager · CVSS 4.3 Medium · Not analysed yet · Published 11 Apr 2023 · Tags: Broken access control - [Improper authentication in Devolutions Remote Desktop Manager](https://agentprime.io/advisories/CVE-2023-1980.md) `CVE-2023-1980` · CVE record: Devolutions Remote Desktop Manager · CVSS 6.5 Medium · Not analysed yet · Published 11 Apr 2023 · Tags: Authentication bypass - [Incorrect authorization in Devolutions Remote Desktop Manager](https://agentprime.io/advisories/CVE-2023-1202.md) `CVE-2023-1202` · CVE record: Devolutions Remote Desktop Manager · CVSS 6.5 Medium · Not analysed yet · Published 23 Mar 2023 · Tags: Broken access control - [Insufficiently protected credentials in Devolutions Remote Desktop Manager](https://agentprime.io/advisories/CVE-2023-1574.md) `CVE-2023-1574` · CVE record: Devolutions Remote Desktop Manager · CVSS 6.5 Medium · Not analysed yet · Published 22 Mar 2023 · Tags: Hard-coded credentials - [Missing authentication in Devolutions Remote Desktop Manager](https://agentprime.io/advisories/CVE-2023-0463.md) `CVE-2023-0463` · CVE record: Devolutions Remote Desktop Manager · CVSS 7.8 High · Not analysed yet · Published 24 Jan 2023 · Tags: Authentication bypass - [Devolutions Remote Desktop Manager: Authentication bypass in local application lock feature in Devolutions Remote Desktop…](https://agentprime.io/advisories/CVE-2022-4287.md) `CVE-2022-4287` · CVE record: Devolutions Remote Desktop Manager · CVSS 8.8 High · Not analysed yet · Published 20 Dec 2022 - [Improper privilege management in Devolutions Remote Desktop Manager](https://agentprime.io/advisories/CVE-2022-3641.md) `CVE-2022-3641` · CVE record: Devolutions Remote Desktop Manager · CVSS 8.8 High · Not analysed yet · Published 7 Dec 2022 · Tags: Privilege escalation - [Missing encryption of sensitive data in Devolutions Remote Desktop Manager and others](https://agentprime.io/advisories/CVE-2022-3781.md) `CVE-2022-3781` · CVE record: Devolutions Remote Desktop Manager and 1 more · CVSS 6.5 Medium · Not analysed yet · Published 1 Nov 2022 · Tags: Weak cryptography or TLS - [Improper access control in Devolutions Remote Desktop Manager](https://agentprime.io/advisories/CVE-2022-3780.md) `CVE-2022-3780` · CVE record: Devolutions Remote Desktop Manager · CVSS 7.5 High · Not analysed yet · Published 1 Nov 2022 · Tags: Broken access control - [Improper access control in Devolutions Remote Desktop Manager](https://agentprime.io/advisories/CVE-2022-3182.md) `CVE-2022-3182` · CVE record: Devolutions Remote Desktop Manager · No CVSS score · Not analysed yet · Published 13 Sept 2022 · Tags: Broken access control - [Information disclosure in Devolutions Remote Desktop Manager](https://agentprime.io/advisories/CVE-2022-2221.md) `CVE-2022-2221` · CVE record: Devolutions Remote Desktop Manager · No CVSS score · Not analysed yet · Published 27 Jun 2022 · Tags: Information disclosure - [Devolutions Remote Desktop Manager: A lack of password masking in Devolutions Remote Desktop Manager allows physically…](https://agentprime.io/advisories/CVE-2022-1342.md) `CVE-2022-1342` · CVE record: Devolutions Remote Desktop Manager · No CVSS score · Not analysed yet · Published 15 Jun 2022 · Tags: CWE-549 - [Devolutions Remote Desktop Manager: An incomplete permission check on entries in Devolutions Remote Desktop Manager before…](https://agentprime.io/advisories/CVE-2021-42098.md) `CVE-2021-42098` · CVE record: Devolutions Remote Desktop Manager · No CVSS score · Not analysed yet · Published 18 Oct 2021 ## Filters and formats Filters are query parameters on this URL: `q` (words, as in a web search engine: `"a phrase"`, `OR`, `-word`; an id; a package or product name), `severity` (low, medium, high or critical), `critical=1`, `kev=1`, `ecosystem` (npm, pypi, packagist, go, maven, rubygems, crates, nuget, hex), `kind=package`, `assigner` (a CNA’s short name), `min_score` and `state`. Each record’s title links to its Markdown page. - The same list as JSON: - Every list: , critical: ; by weakness: and the other tags in ; by technology: `/advisories/technology/.md` (`fortinet-fortimail`) --- The web page: . Everything for agents: .