SE
Product
Server
63
CVEs
0
On KEV
9.8
Max CVSS
16
New 30D
Severity mix
Critical 3High 12Medium 37Low 8
Watch
Add Server to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2026-3130 | 9.8 | Mar 3 | Improper Enforcement of Behavioral Controls in Devolutions Server 2025.3.15 and earlier allows an authenticated attacker with the delete permission to delete a PAM account that is… Affected: before 2025.3.16 |
| CVE-2026-3204 | 9.8 | Mar 3 | Improper input validation in the error message page in Devolutions Server 2025.3.16 and earlier allows remote attackers to spoof the displayed error message via a specially… Affected: through 2025.3.16 |
| CVE-2026-3224 | 9.8 | Mar 3 | Authentication bypass in the Microsoft Entra ID (Azure AD) authentication mode in Devolutions Server 2025.3.15.0 and earlier allows an unauthenticated user to authenticate as an… Affected: through 2025.3.15.0 |
Showing 3
