DS
Product
Devolutions Server
116
CVEs
0
On KEV
9.8
Max CVSS
4
New 30D
Severity mix
Critical 6High 30Medium 68Low 12
Watch
Add Devolutions Server to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2026-3130 | 9.8 | Mar 3 | Improper Enforcement of Behavioral Controls in Devolutions Server 2025.3.15 and earlier allows an authenticated attacker with the delete permission to delete a PAM account that is… Affected: before 2025.3.16.0 |
| CVE-2026-3204 | 9.8 | Mar 3 | Improper input validation in the error message page in Devolutions Server 2025.3.16 and earlier allows remote attackers to spoof the displayed error message via a specially… Affected: through 2025.3.16.0 |
| CVE-2026-3224 | 9.8 | Mar 3 | Authentication bypass in the Microsoft Entra ID (Azure AD) authentication mode in Devolutions Server 2025.3.15.0 and earlier allows an unauthenticated user to authenticate as an… Affected: before 2025.3.16.0 |
| CVE-2026-0610 | 9.8 | Jan 19 | SQL Injection vulnerability in remote-sessions in Devolutions Server.This issue affects Devolutions Server 2025.3.1 through 2025.3.12 Affected: 2025.3.1.0 before 2025.3.14.0 |
| CVE-2024-2921 | 9.8 | Mar 26 | Improper access control in PAM vault permissions in Devolutions Server 2024.1.10.0 and earlier allows an authenticated user with access to the PAM to access unauthorized PAM… Affected: before 2024.1.8.0 |
| CVE-2021-23921 | 9.1 | Apr 1 | An issue was discovered in Devolutions Server before 2020.3 Affected: before 2020.3 |
Showing 6