RD
Product
Remote Desktop Manager
54
CVEs
0
On KEV
9.8
Max CVSS
0
New 30D
Severity mix
Critical 6High 16Medium 29Low 3
Watch
Add Remote Desktop Manager to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2026-12161 | 8.8 | Jun 15 | Improper input validation in the SSH Elevate Shell feature allows an authenticated user with permission to create or modify a shared SSH entry to execute arbitrary commands on a… Affected: 2026.2.5.0 through 2026.2.7; through 2026.1.23.0 |
| CVE-2024-11621 | 8.8 | Feb 10 | Missing certificate validation in Devolutions Remote Desktop Manager on macOS, iOS, Android, Linux allows an attacker to intercept and modify encrypted communications via a… Affected: before 2024.3.2.9; before 2024.3.4.0; before 2024.3.4.2; before 2024.3.10.3 |
| CVE-2022-4287 | 8.8 | Dec 21 | Authentication bypass in local application lock feature in Devolutions Remote Desktop Manager 2022.3.26 and earlier on Windows allows malicious user to access the application Affected: before 2022.3.27 |
| CVE-2022-3641 | 8.8 | Dec 12 | Elevation of privilege in the Azure SQL Data Source in Devolutions Remote Desktop Manager 2022.3.13 to 2022.3.24 allows an authenticated user to spoof a privileged account Affected: 2022.3.13 before 2022.3.26 |
| CVE-2021-42098 | 8.8 | Oct 18 | An incomplete permission check on entries in Devolutions Remote Desktop Manager before 2021.2.16 allows attackers to bypass permissions via batch custom PowerShell Affected: before 2021.2.16 |
| CVE-2025-1193 | 8.1 | Feb 10 | Improper host validation in the certificate validation component in Devolutions Remote Desktop Manager on 2024.3.19 and earlier on Windows allows an attacker to intercept and… Affected: before 2024.3.20.0; before 2024.3.20.0 |
| CVE-2024-12149 | 8.1 | Dec 4 | Incorrect permission assignment in temporary access requests component in Devolutions Remote Desktop Manager 2024.3.19.0 and earlier on Windows allows an authenticated user that… Affected: before 2024.3.20.0; before 2024.3.20.0 |
| CVE-2023-6288 | 7.8 | Dec 6 | Code injection in Remote Desktop Manager 2023.3.9.3 and earlier on macOS allows an attacker to execute code via the DYLIB_INSERT_LIBRARIES environment variable Affected: before 2023.3.10.2 |
| CVE-2025-5334 | 7.5 | May 29 | Exposure of private personal information to an unauthorized actor in the user vaults component of Devolutions Remote Desktop Manager allows an authenticated user to gain… Affected: through 2025.1.16.3; before 2025.1.37.0; before 2025.1.37.0; before 2025.2.0.0; before 2025.2.0.17 |
| CVE-2022-26964 | 7.5 | Dec 26 | Weak password derivation for export in Devolutions Remote Desktop Manager before 2022.1 allows information disclosure via a password brute-force attack Affected: before 2022.1 |
| CVE-2022-3780 | 7.5 | Nov 1 | Database connections on deleted users could stay active on MySQL data sources in Remote Desktop Manager 2022.3.7 and below which allow deleted users to access unauthorized data Affected: through 2022.3.7 |
| CVE-2022-33995 | 7.5 | Jun 21 | A path traversal issue in entry attachments in Devolutions Remote Desktop Manager before 2022.2 allows attackers to create or overwrite files in an arbitrary location Affected: before 2022.2 |
| CVE-2024-6492 | 7.4 | Jul 16 | Exposure of Sensitive Information in edge browser session proxy feature in Devolutions Remote Desktop Manager 2024.2.14.0 and earlier on Windows allows an attacker to intercept… Affected: before 2024.2.15.0; before 2024.2.15.0 |
| CVE-2026-13372 | 7.2 | Jun 26 | Incorrect link resolution by display name in the custom PowerShell VPN editor in Devolutions Remote Desktop Manager 2026.2.5 through 2026.2.11 allows an authenticated attacker… Affected: 2026.2.5 before 2026.2.11 |
| CVE-2024-6354 | 7.2 | Jun 26 | Improper access control in PAM dashboard in Devolutions Remote Desktop Manager 2024.2.11 and earlier on Windows allows an authenticated user to bypass the execute permission via… Affected: before 2024.2.12.0; before 2024.2.12.0 |
| CVE-2022-3182 | 7.0 | Sep 13 | Improper Access Control vulnerability in the Duo SMS two-factor of Devolutions Remote Desktop Manager 2022.2.14 and earlier allows attackers to bypass the application lock Affected: before 2022.2.15 |
Showing 16