Advisories · Technology

Devolutions Remote Desktop Manager.

Every CVE that names Devolutions Remote Desktop Manager among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.

CVE-2026-78417 CVE record

CVSS 4.3 Medium

Insufficient verification of data authenticity in Devolutions Remote Desktop Manager
- Devolutions Remote Desktop Manager
- CWE-345
Not analysed yet 24 Aug 2026
CVE-2026-13372 CVE record

CVSS 7.2 High

Devolutions Remote Desktop Manager: Incorrect link resolution by display name in the custom PowerShell VPN editor in…
- Devolutions Remote Desktop Manager
- CWE-706
Not analysed yet 26 Jun 2026
CVE-2026-12162 CVE record

CVSS 5.5 Medium

Improper certificate validation in Devolutions Remote Desktop Manager
- Devolutions Remote Desktop Manager
- Weak cryptography or TLS
Not analysed yet 15 Jun 2026
CVE-2026-12161 CVE record

CVSS 8.8 High

OS command injection in Devolutions Remote Desktop Manager
- Devolutions Remote Desktop Manager
- Command injection
Not analysed yet 15 Jun 2026
CVE-2026-2590 CVE record

CVSS 9.8 CriticalCritical · CVSS 9+

Improper certificate validation in Devolutions Remote Desktop Manager
- Devolutions Remote Desktop Manager
- Weak cryptography or TLS
Not analysed yet 3 Mar 2026
CVE-2026-0747 CVE record

CVSS 3.3 Low

Information disclosure in Devolutions Remote Desktop Manager
- Devolutions Remote Desktop Manager
- Information disclosure
Not analysed yet 8 Jan 2026
CVE-2025-13683 CVE record

CVSS 6.5 Medium

Information disclosure in Devolutions Server and others
- Devolutions Server
- Devolutions Remote Desktop Manager
- Information disclosure
Not analysed yet 28 Nov 2025
CVE-2025-5334 CVE record

CVSS 7.5 High

Exposure of personal information in Devolutions Remote Desktop Manager
- Devolutions Remote Desktop Manager
- Information disclosure
Not analysed yet 29 May 2025
CVE-2025-2600 CVE record

CVSS 6.8 Medium

Improper authorization in Devolutions Remote Desktop Manager
- Devolutions Remote Desktop Manager
- Broken access control
Not analysed yet 26 Mar 2025
CVE-2025-2562 CVE record

CVSS 5.4 Medium

Devolutions Remote Desktop Manager: Insufficient logging in the autotyping feature in Devolutions Remote Desktop Manager on…
- Devolutions Remote Desktop Manager
- CWE-778
Not analysed yet 26 Mar 2025
CVE-2025-2528 CVE record

CVSS 3.6 Low

Improper authorization in Devolutions Remote Desktop Manager
- Devolutions Remote Desktop Manager
- Broken access control
Not analysed yet 26 Mar 2025
CVE-2025-2499 CVE record

CVSS 5.4 Medium

Improper access control in Devolutions Remote Desktop Manager
- Devolutions Remote Desktop Manager
- Broken access control
Not analysed yet 26 Mar 2025
CVE-2025-1636 CVE record

CVSS 6.5 Medium

Information disclosure in Devolutions Remote Desktop Manager
- Devolutions Remote Desktop Manager
- Information disclosure
Not analysed yet 13 Mar 2025
CVE-2025-1635 CVE record

CVSS 6.5 Medium

Information disclosure in Devolutions Remote Desktop Manager
- Devolutions Remote Desktop Manager
- Information disclosure
Not analysed yet 13 Mar 2025
CVE-2024-11621 CVE record

CVSS 8.8 High

Improper certificate validation in Devolutions Remote Desktop Manager
- Devolutions Remote Desktop Manager
- Weak cryptography or TLS
Not analysed yet 10 Feb 2025
CVE-2025-1193 CVE record

CVSS 8.1 High

Improper certificate validation in Devolutions Remote Desktop Manager
- Devolutions Remote Desktop Manager
- Weak cryptography or TLS
Not analysed yet 10 Feb 2025
CVE-2024-12149 CVE record

CVSS 8.1 High

Incorrect permission assignment in Devolutions Remote Desktop Manager
- Devolutions Remote Desktop Manager
- Broken access control
Not analysed yet 4 Dec 2024
CVE-2024-11670 CVE record

CVSS 5.4 Medium

Incorrect authorization in Devolutions Remote Desktop Manager
- Devolutions Remote Desktop Manager
- Broken access control
Not analysed yet 25 Nov 2024
CVE-2024-11671 CVE record

CVSS 5.4 Medium

Improper authentication in Devolutions Remote Desktop Manager
- Devolutions Remote Desktop Manager
- Authentication bypass
Not analysed yet 25 Nov 2024
CVE-2024-11672 CVE record

CVSS 4.3 Medium

Incorrect authorization in Devolutions Remote Desktop Manager
- Devolutions Remote Desktop Manager
- Broken access control
Not analysed yet 25 Nov 2024
CVE-2024-7421 CVE record

CVSS 5.5 Medium

Sensitive information in log files in Devolutions Remote Desktop Manager
- Devolutions Remote Desktop Manager
- Information disclosure
Not analysed yet 25 Sept 2024
CVE-2024-6492 CVE record

CVSS 7.4 High

Insufficiently protected credentials in Devolutions Remote Desktop Manager
- Devolutions Remote Desktop Manager
- Hard-coded credentials
Not analysed yet 16 Jul 2024
CVE-2024-6354 CVE record

CVSS 7.2 High

Devolutions Remote Desktop Manager: Improper access control in PAM dashboard in Devolutions Remote Desktop Manager 2024.2.11…
- Devolutions Remote Desktop Manager
- CWE-1262
Not analysed yet 26 Jun 2024
CVE-2024-6057 CVE record

CVSS 9.8 CriticalCritical · CVSS 9+

Improper authentication in Devolutions Remote Desktop Manager
- Devolutions Remote Desktop Manager
- Authentication bypass
Not analysed yet 17 Jun 2024
CVE-2024-6055 CVE record

CVSS 4.7 Medium

Devolutions Remote Desktop Manager: Improper removal of sensitive information in data source export feature in Devolutions…
- Devolutions Remote Desktop Manager
- CWE-212
Not analysed yet 17 Jun 2024
CVE-2024-3545 CVE record

CVSS 4.3 Medium

Devolutions Server: Improper permission handling in the vault offline cache feature in Devolutions Remote…
- Devolutions Server
- Devolutions Remote Desktop Manager
- CWE-281
Not analysed yet 9 Apr 2024
CVE-2024-2403 CVE record

CVSS 5.9 Medium

Incomplete cleanup in Devolutions Remote Desktop Manager
- Devolutions Remote Desktop Manager
- CWE-459
Not analysed yet 13 Mar 2024
CVE-2024-0589 CVE record

CVSS 5.4 Medium

Cross-site scripting in Devolutions Remote Desktop Manager
- Devolutions Remote Desktop Manager
- Cross-site scripting (XSS)
Not analysed yet 31 Jan 2024
CVE-2023-7047 CVE record

Incorrect authorization in Devolutions Remote Desktop Manager
- Devolutions Remote Desktop Manager
- Broken access control
Not analysed yet 21 Dec 2023
CVE-2023-6593 CVE record

Devolutions Remote Desktop Manager: Client side permission bypass in Devolutions Remote Desktop Manager 2023.3.4.0 and…
- Devolutions Remote Desktop Manager
Not analysed yet 12 Dec 2023
CVE-2023-6288 CVE record

Devolutions Remote Desktop Manager: Code injection in Remote Desktop Manager 2023.3.9.3 and earlier on macOS allows an…
- Devolutions Remote Desktop Manager
Not analysed yet 6 Dec 2023
CVE-2023-5765 CVE record

Devolutions Remote Desktop Manager: Improper access control in the password analyzer feature in Devolutions Remote Desktop…
- Devolutions Remote Desktop Manager
Not analysed yet 1 Nov 2023
CVE-2023-5766 CVE record

CVSS 8.8 High

Devolutions Remote Desktop Manager: A remote code execution vulnerability in Remote Desktop Manager 2023.2.33 and earlier on…
- Devolutions Remote Desktop Manager
Not analysed yet 1 Nov 2023
CVE-2023-4417 CVE record

Devolutions Remote Desktop Manager: Improper access controls in the entry duplication component in Devolutions Remote Desktop…
- Devolutions Remote Desktop Manager
Not analysed yet 21 Aug 2023
CVE-2023-4373 CVE record

CVSS 9.8 CriticalCritical · CVSS 9+

Improper authentication in Devolutions Remote Desktop Manager
- Devolutions Remote Desktop Manager
- Authentication bypass
Not analysed yet 21 Aug 2023
CVE-2023-2282 CVE record

CVSS 3.1 Low

Devolutions Remote Desktop Manager: Improper access control in the Web Login listener in Devolutions Remote Desktop Manager…
- Devolutions Remote Desktop Manager
Not analysed yet 25 Apr 2023
CVE-2023-1939 CVE record

CVSS 4.3 Medium

No access control for the OTP key on OTP entries
- Devolutions Remote Desktop Manager
- Broken access control
Not analysed yet 11 Apr 2023
CVE-2023-1980 CVE record

CVSS 6.5 Medium

Improper authentication in Devolutions Remote Desktop Manager
- Devolutions Remote Desktop Manager
- Authentication bypass
Not analysed yet 11 Apr 2023
CVE-2023-1202 CVE record

CVSS 6.5 Medium

Incorrect authorization in Devolutions Remote Desktop Manager
- Devolutions Remote Desktop Manager
- Broken access control
Not analysed yet 23 Mar 2023
CVE-2023-1574 CVE record

CVSS 6.5 Medium

Insufficiently protected credentials in Devolutions Remote Desktop Manager
- Devolutions Remote Desktop Manager
- Hard-coded credentials
Not analysed yet 22 Mar 2023
CVE-2023-0463 CVE record

CVSS 7.8 High

Missing authentication in Devolutions Remote Desktop Manager
- Devolutions Remote Desktop Manager
- Authentication bypass
Not analysed yet 24 Jan 2023
CVE-2022-4287 CVE record

CVSS 8.8 High

Devolutions Remote Desktop Manager: Authentication bypass in local application lock feature in Devolutions Remote Desktop…
- Devolutions Remote Desktop Manager
Not analysed yet 20 Dec 2022
CVE-2022-3641 CVE record

CVSS 8.8 High

Improper privilege management in Devolutions Remote Desktop Manager
- Devolutions Remote Desktop Manager
- Privilege escalation
Not analysed yet 7 Dec 2022
CVE-2022-3781 CVE record

CVSS 6.5 Medium

Missing encryption of sensitive data in Devolutions Remote Desktop Manager and others
- Devolutions Remote Desktop Manager
- Devolutions Server
- Weak cryptography or TLS
Not analysed yet 1 Nov 2022
CVE-2022-3780 CVE record

CVSS 7.5 High

Improper access control in Devolutions Remote Desktop Manager
- Devolutions Remote Desktop Manager
- Broken access control
Not analysed yet 1 Nov 2022
CVE-2022-3182 CVE record

Improper access control in Devolutions Remote Desktop Manager
- Devolutions Remote Desktop Manager
- Broken access control
Not analysed yet 13 Sept 2022
CVE-2022-2221 CVE record

Information disclosure in Devolutions Remote Desktop Manager
- Devolutions Remote Desktop Manager
- Information disclosure
Not analysed yet 27 Jun 2022
CVE-2022-1342 CVE record

Devolutions Remote Desktop Manager: A lack of password masking in Devolutions Remote Desktop Manager allows physically…
- Devolutions Remote Desktop Manager
- CWE-549
Not analysed yet 15 Jun 2022
CVE-2021-42098 CVE record

Devolutions Remote Desktop Manager: An incomplete permission check on entries in Devolutions Remote Desktop Manager before…
- Devolutions Remote Desktop Manager
Not analysed yet 18 Oct 2021