Advisories · Technology

Devolutions Server.

Every CVE that names Devolutions Server among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.

CVE-2026-120716 CVE record

Information disclosure in Devolutions Server
- Devolutions Server
- Information disclosure
Not analysed yet 3 Nov 2026
CVE-2026-119636 CVE record

Resource leak in Devolutions Server
- Devolutions Server
- Denial of service
Not analysed yet 3 Nov 2026
CVE-2026-120734 CVE record

Cleartext transmission of sensitive information in Devolutions Server
- Devolutions Server
- Weak cryptography or TLS
Not analysed yet 3 Nov 2026
CVE-2026-120715 CVE record

Server-side request forgery in Devolutions Server
- Devolutions Server
- Server-side request forgery (SSRF)
Not analysed yet 3 Nov 2026
CVE-2026-120733 CVE record

Cleartext storage of sensitive information in Devolutions Server
- Devolutions Server
- Information disclosure
Not analysed yet 3 Nov 2026
CVE-2026-121580 CVE record

Server-side request forgery in Devolutions Server
- Devolutions Server
- Server-side request forgery (SSRF)
Not analysed yet 3 Nov 2026
CVE-2026-114487 CVE record

CVSS 4.3 Medium

Missing authorization in Devolutions Server
- Devolutions Server
- Broken access control
Not analysed yet 22 Oct 2026
CVE-2026-114486 CVE record

CVSS 4.3 Medium

Incorrect authorization in Devolutions Server
- Devolutions Server
- Broken access control
Not analysed yet 22 Oct 2026
CVE-2026-114485 CVE record

CVSS 4.3 Medium

Information disclosure in Devolutions Server
- Devolutions Server
- Information disclosure
Not analysed yet 22 Oct 2026
CVE-2026-110805 CVE record

CVSS 2.6 Low

Server-side request forgery in Devolutions Server
- Devolutions Server
- Server-side request forgery (SSRF)
Not analysed yet 16 Oct 2026
CVE-2026-110804 CVE record

CVSS 4.3 Medium

Mass assignment in Devolutions Server
- Devolutions Server
- Broken access control
Not analysed yet 16 Oct 2026
CVE-2026-110806 CVE record

CVSS 6.5 Medium

Incorrect authorization in Devolutions Server
- Devolutions Server
- Broken access control
Not analysed yet 16 Oct 2026
CVE-2026-110287 CVE record

CVSS 4.3 Medium

Incorrect authorization in Devolutions Server
- Devolutions Server
- Broken access control
Not analysed yet 16 Oct 2026
CVE-2026-105488 CVE record

CVSS 7.1 High

Missing authorization in Devolutions Server
- Devolutions Server
- Broken access control
Not analysed yet 6 Oct 2026
CVE-2026-105485 CVE record

CVSS 6.8 Medium

Authentication bypass by replay in Devolutions Server
- Devolutions Server
- Authentication bypass
Not analysed yet 6 Oct 2026
CVE-2026-9226 CVE record

CVSS 6.8 Medium

Authentication bypass by replay in Devolutions Server
- Devolutions Server
- Authentication bypass
Not analysed yet 6 Oct 2026
CVE-2026-100289 CVE record

CVSS 5.0 Medium

Missing authorization in Devolutions Server
- Devolutions Server
- Broken access control
Not analysed yet 29 Sept 2026
CVE-2026-100288 CVE record

CVSS 7.2 High

Cleartext storage of sensitive information in Devolutions Server
- Devolutions Server
- Information disclosure
Not analysed yet 29 Sept 2026
CVE-2026-100287 CVE record

CVSS 5.4 Medium

Missing authorization in Devolutions Server
- Devolutions Server
- Broken access control
Not analysed yet 29 Sept 2026
CVE-2026-100286 CVE record

CVSS 6.5 Medium

Information disclosure in Devolutions Server
- Devolutions Server
- Information disclosure
Not analysed yet 29 Sept 2026
CVE-2026-93332 CVE record

CVSS 5.4 Medium

Missing authorization in Devolutions Server
- Devolutions Server
- Broken access control
Not analysed yet 29 Sept 2026
CVE-2026-93330 CVE record

CVSS 4.3 Medium

Devolutions Server: Improper rule enforcement in the PAM Active Directory provider in Devolutions Server…
- Devolutions Server
- CWE-696
Not analysed yet 29 Sept 2026
CVE-2026-13327 CVE record

CVSS 8.3 High

Improper certificate validation in Devolutions Server
- Devolutions Server
- Weak cryptography or TLS
Not analysed yet 15 Sept 2026
CVE-2026-84850 CVE record

CVSS 4.8 Medium

Improper certificate validation in Devolutions Server
- Devolutions Server
- Weak cryptography or TLS
Not analysed yet 15 Sept 2026
CVE-2026-90969 CVE record

CVSS 6.5 Medium

Improper access control in Devolutions Server
- Devolutions Server
- Broken access control
Not analysed yet 15 Sept 2026
CVE-2026-90971 CVE record

CVSS 6.5 Medium

Incorrect authorization in Devolutions Server
- Devolutions Server
- Broken access control
Not analysed yet 15 Sept 2026
CVE-2026-17570 CVE record

CVSS 4.3 Medium

Insecure direct object reference in Devolutions Server
- Devolutions Server
- Broken access control
Not analysed yet 27 Jul 2026
CVE-2026-17569 CVE record

CVSS 4.3 Medium

Insufficiently protected credentials in Devolutions Server
- Devolutions Server
- Hard-coded credentials
Not analysed yet 27 Jul 2026
CVE-2026-17568 CVE record

CVSS 8.8 High

Incorrect authorization in Devolutions Server
- Devolutions Server
- Broken access control
Not analysed yet 27 Jul 2026
CVE-2026-15058 CVE record

CVSS 3.1 Low

Insecure direct object reference in Devolutions Server
- Devolutions Server
- Broken access control
Not analysed yet 14 Jul 2026
CVE-2026-15642 CVE record

CVSS 3.3 Low

Information disclosure in Devolutions Server
- Devolutions Server
- Information disclosure
Not analysed yet 14 Jul 2026
CVE-2026-15641 CVE record

CVSS 7.1 High

Incorrect authorization in Devolutions Server
- Devolutions Server
- Broken access control
Not analysed yet 14 Jul 2026
CVE-2026-15637 CVE record

CVSS 7.5 High

Insecure direct object reference in Devolutions Server
- Devolutions Server
- Broken access control
Not analysed yet 14 Jul 2026
CVE-2026-14536 CVE record

CVSS 7.3 High

Devolutions Server: Improper enforcement of a mandatory multi-factor authentication policy in Devolutions…
- Devolutions Server
Not analysed yet 6 Jul 2026
CVE-2026-12755 CVE record

CVSS 2.7 Low

Devolutions Server: Improper input validation in the PAM AD discovery endpoints in Devolutions Server…
- Devolutions Server
- CWE-1284
Not analysed yet 25 Jun 2026
CVE-2026-12105 CVE record

CVSS 6.5 Medium

Missing authorization in Devolutions Server
- Devolutions Server
- Broken access control
Not analysed yet 16 Jun 2026
CVE-2026-12117 CVE record

CVSS 4.3 Medium

Information disclosure in Devolutions Server
- Devolutions Server
- Information disclosure
Not analysed yet 16 Jun 2026
CVE-2026-11890 CVE record

CVSS 4.3 Medium

Improper access control in Devolutions Server
- Devolutions Server
- Broken access control
- CWE-882
Not analysed yet 16 Jun 2026
CVE-2026-10544 CVE record

CVSS 6.5 Medium

OS command injection in Devolutions Server
- Devolutions Server
- Command injection
Not analysed yet 8 Jun 2026
CVE-2026-10787 CVE record

CVSS 4.3 Medium

Missing authorization in Devolutions Server
- Devolutions Server
- Broken access control
Not analysed yet 8 Jun 2026
CVE-2026-10786 CVE record

CVSS 6.5 Medium

Cleartext storage of sensitive information in Devolutions Server
- Devolutions Server
- Information disclosure
Not analysed yet 8 Jun 2026
CVE-2026-9522 CVE record

CVSS 5.4 Medium

Improper access control in Devolutions Server
- Devolutions Server
- Broken access control
Not analysed yet 2 Jun 2026
CVE-2026-9590 CVE record

CVSS 5.3 Medium

Improper access control in Devolutions Server
- Devolutions Server
- Broken access control
Not analysed yet 2 Jun 2026
CVE-2026-7325 CVE record

CVSS 7.1 High

Server-side request forgery in Devolutions Server
- Devolutions Server
- Server-side request forgery (SSRF)
Not analysed yet 22 May 2026
CVE-2026-9251 CVE record

CVSS 5.4 Medium

Missing authorization in Devolutions Server
- Devolutions Server
- Broken access control
Not analysed yet 22 May 2026
CVE-2026-5171 CVE record

CVSS 4.3 Medium

Improper access control in Devolutions Server
- Devolutions Server
- Broken access control
Not analysed yet 22 May 2026
CVE-2026-8477 CVE record

CVSS 2.7 Low

Devolutions Server: Improper enforcement of the sealed-entry workflow in the entry sensitive-data retrieval…
- Devolutions Server
- CWE-841
Not analysed yet 22 May 2026
CVE-2026-9246 CVE record

CVSS 4.3 Medium

Missing authorization in Devolutions Server
- Devolutions Server
- Broken access control
Not analysed yet 22 May 2026
CVE-2026-9224 CVE record

CVSS 4.3 Medium

Missing authorization in Devolutions Server
- Devolutions Server
- Broken access control
Not analysed yet 22 May 2026
CVE-2026-9249 CVE record

CVSS 3.1 Low

Devolutions Server: Unverified password change in Devolutions Server allows an attacker to change a user's…
- Devolutions Server
- CWE-620
Not analysed yet 22 May 2026
CVE-2026-9245 CVE record

CVSS 5.0 Medium

Open redirect in Devolutions Server
- Devolutions Server
- Open redirect
Not analysed yet 22 May 2026
CVE-2026-9247 CVE record

CVSS 2.4 Low

Devolutions Server: Insufficient logging in the entry export feature in Devolutions Server allows an…
- Devolutions Server
- CWE-778
Not analysed yet 22 May 2026
CVE-2026-9248 CVE record

CVSS 2.6 Low

Insecure direct object reference in Devolutions Server
- Devolutions Server
- Broken access control
Not analysed yet 22 May 2026
CVE-2026-9223 CVE record

CVSS 4.3 Medium

Improper access control in Devolutions Server
- Devolutions Server
- Broken access control
Not analysed yet 22 May 2026
CVE-2026-9047 CVE record

CVSS 7.6 High

Devolutions Server: Improper handling of factor key state in the multi-factor authentication management…
- Devolutions Server
- CWE-305
Not analysed yet 22 May 2026
CVE-2026-5146 CVE record

CVSS 4.3 Medium

Missing authorization in Devolutions Server
- Devolutions Server
- Broken access control
Not analysed yet 12 May 2026
CVE-2026-8407 CVE record

CVSS 4.3 Medium

Missing authorization in Devolutions Server
- Devolutions Server
- Broken access control
Not analysed yet 12 May 2026
CVE-2026-6706 CVE record

CVSS 6.5 Medium

Missing authorization in Devolutions Server
- Devolutions Server
- Broken access control
Not analysed yet 28 Apr 2026
CVE-2026-4989 CVE record

CVSS 4.3 Medium

Server-side request forgery in Devolutions Server
- Devolutions Server
- Server-side request forgery (SSRF)
Not analysed yet 1 Apr 2026
CVE-2026-5175 CVE record

CVSS 5.0 Medium

Missing authorization in Devolutions Server
- Devolutions Server
- Broken access control
Not analysed yet 1 Apr 2026