Advisories · Technology

Devolutions Server.

Every CVE that names Devolutions Server among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.

CVE-2026-4925 CVE record

CVSS 5.0 Medium

Missing authorization in Devolutions Server
- Devolutions Server
- Broken access control
Not analysed yet 1 Apr 2026
CVE-2026-4927 CVE record

CVSS 6.5 Medium

Information disclosure in Devolutions Server
- Devolutions Server
- Information disclosure
Not analysed yet 1 Apr 2026
CVE-2026-4924 CVE record

CVSS 8.2 High

Weak authentication in Devolutions Server
- Devolutions Server
- Authentication bypass
Not analysed yet 1 Apr 2026
CVE-2026-4828 CVE record

CVSS 8.2 High

Weak authentication in Devolutions Server
- Devolutions Server
- Authentication bypass
Not analysed yet 1 Apr 2026
CVE-2026-4829 CVE record

CVSS 5.4 Medium

Improper authentication in Devolutions Server
- Devolutions Server
- Authentication bypass
Not analysed yet 1 Apr 2026
CVE-2026-4434 CVE record

CVSS 8.1 High

Improper certificate validation in Devolutions Server
- Devolutions Server
- Weak cryptography or TLS
Not analysed yet 20 Mar 2026
CVE-2026-3638 CVE record

CVSS 5.9 Medium

Missing authorization in Devolutions Server
- Devolutions Server
- Broken access control
Not analysed yet 9 Mar 2026
CVE-2026-3130 CVE record

CVSS 9.8 CriticalCritical · CVSS 9+

Devolutions Server: Improper Enforcement of Behavioral Controls in Devolutions Server 2025.3.15 and earlier…
- Devolutions Server
- CWE-841
Not analysed yet 3 Mar 2026
CVE-2026-3204 CVE record

CVSS 9.8 CriticalCritical · CVSS 9+

Improper input validation in Devolutions Server
- Devolutions Server
- CWE-20
Not analysed yet 3 Mar 2026
CVE-2026-3224 CVE record

CVSS 9.8 CriticalCritical · CVSS 9+

Improper authentication in Devolutions Server
- Devolutions Server
- Authentication bypass
Not analysed yet 3 Mar 2026
CVE-2026-3221 CVE record

CVSS 4.9 Medium

Cleartext storage of sensitive information in Devolutions Server
- Devolutions Server
- Information disclosure
Not analysed yet 25 Feb 2026
CVE-2026-3131 CVE record

CVSS 6.5 Medium

Information disclosure in Devolutions Server
- Devolutions Server
- Information disclosure
Not analysed yet 24 Feb 2026
CVE-2026-1768 CVE record

CVSS 4.3 Medium

Incorrect authorization in Devolutions Server
- Devolutions Server
- Broken access control
Not analysed yet 24 Feb 2026
CVE-2026-1007 CVE record

CVSS 7.6 High

Incorrect authorization in Devolutions Server
- Devolutions Server
- Broken access control
Not analysed yet 19 Jan 2026
CVE-2026-0610 CVE record

CVSS 9.8 CriticalCritical · CVSS 9+

SQL injection in Devolutions Server
- Devolutions Server
- SQL injection
Not analysed yet 19 Jan 2026
CVE-2025-13683 CVE record

CVSS 6.5 Medium

Information disclosure in Devolutions Server and others
- Devolutions Server
- Devolutions Remote Desktop Manager
- Information disclosure
Not analysed yet 28 Nov 2025
CVE-2025-13758 CVE record

CVSS 3.5 Low

Information disclosure in Devolutions Server
- Devolutions Server
- Information disclosure
Not analysed yet 27 Nov 2025
CVE-2025-13757 CVE record

CVSS 8.8 High

SQL injection in Devolutions Server
- Devolutions Server
- SQL injection
Not analysed yet 27 Nov 2025
CVE-2025-13765 CVE record

CVSS 4.3 Medium

Information disclosure in Devolutions Server
- Devolutions Server
- Information disclosure
Not analysed yet 27 Nov 2025
CVE-2025-12485 CVE record

CVSS 8.8 High

Improper privilege management in Devolutions Server
- Devolutions Server
- Privilege escalation
Not analysed yet 6 Nov 2025
CVE-2025-12808 CVE record

CVSS 6.5 Medium

Improper access control in Devolutions Server
- Devolutions Server
- Broken access control
Not analysed yet 6 Nov 2025
CVE-2025-11957 CVE record

CVSS 9.0 CriticalCritical · CVSS 9+

Insecure direct object reference in Devolutions Server
- Devolutions Server
- Broken access control
Not analysed yet 22 Oct 2025
CVE-2025-11958 CVE record

CVSS 5.1 Medium

Improper input validation in Devolutions Server
- Devolutions Server
- CWE-20
Not analysed yet 22 Oct 2025
CVE-2025-11619 CVE record

CVSS 8.8 High

Improper certificate validation in Devolutions Server
- Devolutions Server
- Weak cryptography or TLS
Not analysed yet 15 Oct 2025
CVE-2025-8312 CVE record

CVSS 7.1 High

Deadlock in Devolutions Server
- Devolutions Server
- Denial of service
Not analysed yet 30 Jul 2025
CVE-2025-8353 CVE record

CVSS 5.9 Medium

Devolutions Server: UI synchronization issue in the Just-in-Time (JIT) access request approval interface in…
- Devolutions Server
- CWE-446
Not analysed yet 30 Jul 2025
CVE-2025-6741 CVE record

CVSS 7.1 High

Improper access control in Devolutions Server
- Devolutions Server
- Broken access control
Not analysed yet 22 Jul 2025
CVE-2025-6523 CVE record

CVSS 9.5 CriticalCritical · CVSS 9+

Weak credentials in Devolutions Server
- Devolutions Server
- Hard-coded credentials
Not analysed yet 22 Jul 2025
CVE-2025-0691 CVE record

CVSS 5.0 Medium

Improper access control in Devolutions Server
- Devolutions Server
- Broken access control
Not analysed yet 5 Jun 2025
CVE-2025-5382 CVE record

CVSS 6.8 Medium

Improper access control in Devolutions Server
- Devolutions Server
- Broken access control
Not analysed yet 5 Jun 2025
CVE-2025-3768 CVE record

CVSS 5.0 Medium

Improper access control in Devolutions Server
- Devolutions Server
- Broken access control
Not analysed yet 5 Jun 2025
CVE-2025-4433 CVE record

CVSS 8.7 High

Improper access control in Devolutions Server
- Devolutions Server
- Broken access control
Not analysed yet 30 May 2025
CVE-2025-4493 CVE record

CVSS 6.5 Medium

Devolutions Server: Improper privilege assignment in PAM JIT privilege sets in Devolutions Server allows a…
- Devolutions Server
- Privilege escalation
Not analysed yet 28 May 2025
CVE-2025-4316 CVE record

CVSS 4.3 Medium

Improper access control in Devolutions Server
- Devolutions Server
- Broken access control
Not analysed yet 5 May 2025
CVE-2025-3517 CVE record

CVSS 6.3 Medium

Devolutions Server: Incorrect privilege assignment in PAM JIT elevation feature in Devolutions Server…
- Devolutions Server
- Privilege escalation
Not analysed yet 1 May 2025
CVE-2025-2280 CVE record

CVSS 8.1 High

Improper access control in Devolutions Server
- Devolutions Server
- Broken access control
Not analysed yet 13 Mar 2025
CVE-2025-2278 CVE record

CVSS 6.5 Medium

Improper access control in Devolutions Server
- Devolutions Server
- Broken access control
Not analysed yet 13 Mar 2025
CVE-2025-2277 CVE record

CVSS 7.5 High

Information disclosure in Devolutions Server
- Devolutions Server
- Information disclosure
Not analysed yet 13 Mar 2025
CVE-2025-2003 CVE record

CVSS 7.1 High

Incorrect authorization in Devolutions Server
- Devolutions Server
- Broken access control
Not analysed yet 5 Mar 2025
CVE-2025-1231 CVE record

CVSS 5.4 Medium

Improper authentication in Devolutions Server
- Devolutions Server
- Authentication bypass
Not analysed yet 11 Feb 2025
CVE-2024-12148 CVE record

CVSS 4.3 Medium

Incorrect authorization in Devolutions Server
- Devolutions Server
- Broken access control
Not analysed yet 4 Dec 2024
CVE-2024-12151 CVE record

CVSS 5.0 Medium

Incorrect permission assignment in Devolutions Server
- Devolutions Server
- Broken access control
Not analysed yet 4 Dec 2024
CVE-2024-12196 CVE record

CVSS 6.5 Medium

Incorrect authorization in Devolutions Server
- Devolutions Server
- Broken access control
Not analysed yet 4 Dec 2024
CVE-2024-6512 CVE record

CVSS 6.5 Medium

Incorrect authorization in Devolutions Server
- Devolutions Server
- Broken access control
Not analysed yet 25 Sept 2024
CVE-2024-4846 CVE record

CVSS 6.3 Medium

Authentication bypass by spoofing in Devolutions Server
- Devolutions Server
- Authentication bypass
Not analysed yet 25 Jun 2024
CVE-2024-5072 CVE record

CVSS 6.5 Medium

Devolutions Server: Improper input validation in PAM JIT elevation feature in Devolutions Server 2024.1.11.0…
- Devolutions Server
Not analysed yet 17 May 2024
CVE-2024-3545 CVE record

CVSS 4.3 Medium

Devolutions Server: Improper permission handling in the vault offline cache feature in Devolutions Remote…
- Devolutions Server
- Devolutions Remote Desktop Manager
- CWE-281
Not analysed yet 9 Apr 2024
CVE-2024-2918 CVE record

CVSS 3.6 Low

Devolutions Server: Improper input validation in PAM JIT elevation feature in Devolutions Server 2024.1.6 and…
- Devolutions Server
Not analysed yet 9 Apr 2024
CVE-2024-2921 CVE record

CVSS 9.8 CriticalCritical · CVSS 9+

Missing authentication in Devolutions Server
- Devolutions Server
- Authentication bypass
Not analysed yet 26 Mar 2024
CVE-2024-2915 CVE record

CVSS 8.8 High

Incorrect authorization in Devolutions Server
- Devolutions Server
- Broken access control
Not analysed yet 26 Mar 2024
CVE-2024-1764 CVE record

CVSS 7.6 High

Improper privilege management in Devolutions Server
- Devolutions Server
- Privilege escalation
Not analysed yet 5 Mar 2024
CVE-2024-1898 CVE record

CVSS 3.9 Low

Improper access control in Devolutions Server
- Devolutions Server
- Broken access control
Not analysed yet 5 Mar 2024
CVE-2024-1900 CVE record

CVSS 5.5 Medium

Devolutions Server: Improper session management in the identity provider authentication flow in Devolutions…
- Devolutions Server
Not analysed yet 5 Mar 2024
CVE-2024-1901 CVE record

CVSS 4.3 Medium

Devolutions Server: Denial of service in PAM password rotation during the check-in process in Devolutions…
- Devolutions Server
Not analysed yet 5 Mar 2024
CVE-2023-6264 CVE record

Devolutions Server: Information leak in Content-Security-Policy header in Devolutions Server 2023.3.7.0…
- Devolutions Server
Not analysed yet 22 Nov 2023
CVE-2023-5358 CVE record

Devolutions Server: Improper access control in Report log filters feature in Devolutions Server 2023.2.10.0…
- Devolutions Server
Not analysed yet 1 Nov 2023
CVE-2023-5575 CVE record

Devolutions Server: Improper access control in the permission inheritance in Devolutions Server 2022.3.13.0…
- Devolutions Server
Not analysed yet 16 Oct 2023
CVE-2023-5240 CVE record

Improper access control in Devolutions Server
- Devolutions Server
- Broken access control
Not analysed yet 13 Oct 2023
CVE-2023-2400 CVE record

CVSS 2.7 Low

Incomplete cleanup in Devolutions Server
- Devolutions Server
- CWE-459
Not analysed yet 20 Jun 2023
CVE-2023-2445 CVE record

CVSS 4.9 Medium

Origin validation error in Devolutions Server
- Devolutions Server
- CWE-346
Not analysed yet 2 May 2023