Devolutions Server vulnerabilities

• devolutions server Improper access control in Devolutions Server 2026.2.5, 2026.1.21 allows an authenticated user... CVE-2026-12105 6.5 MediumJune 16, 2026
• devolutions server Improper access control in the social login connection endpoint in Devolutions Server 2026.2.5... CVE-2026-12117 4.3 MediumJune 16, 2026
• devolutions server Improper access control in PAM account discovery results in Devolutions Server 2026.2.5, 2026.1... CVE-2026-11890 4.3 MediumJune 16, 2026
• devolutions server A permission cache poisoning vulnerability in Devolutions Server allows authenticated users to... CVE-2026-1768 4.3 MediumFebruary 24, 2026
• devolutions server Improper certificate validation when connecting to gateways in Devolutions Server 2025.3.2 and... CVE-2025-11619 8.8 HighOctober 15, 2025
• devolutions server Incorrect privilege assignment in PAM JIT elevation feature in Devolutions Server 2025.1.5.0 and... CVE-2025-3517 6.3 MediumMay 1, 2025
• devolutions server, dvls (devolutions server) +1 more Improper access control in the Password History feature in Devolutions DVLS 2024.3.6 and earlier... CVE-2024-10971 4.3 MediumNovember 12, 2024
• devolutions server Authorization bypass in the PAM access request approval mechanism in Devolutions Server 2024.2.10... CVE-2024-6512 6.5 MediumSeptember 25, 2024
• devolutions server Improper access control in Report log filters feature in Devolutions Server 2023.2.10.0 and... CVE-2023-5358 5.3 MediumNovember 1, 2023
• devolutions server Improper access control in Subscriptions Folder path filter in Devolutions Server 2023.1.1 and... CVE-2023-2445 4.9 MediumMay 2, 2023
• devolutions server Insufficient access control in support ticket feature in Devolutions Server 2023.1.5.0 and below... CVE-2023-2118 5.4 MediumApril 21, 2023
• devolutions server Improper access control in the secure messages feature in Devolutions Server 2022.3.12 and below... CVE-2023-1201 6.5 MediumMarch 6, 2023
• devolutions server Improper access controls on entries in Devolutions Server 2022.3.12 and earlier could allow an... CVE-2023-0952 6.5 MediumFebruary 22, 2023
• devolutions server Improper access controls on some API endpoints in Devolutions Server 2022.3.12 and earlier could... CVE-2023-0951 8.8 HighFebruary 22, 2023
• devolutions server Insufficient input sanitization in the documentation feature of Devolutions Server 2022.3.12 and... CVE-2023-0953 8.8 HighFebruary 22, 2023
• devolutions server Improper access control in Devolutions Server allows an authenticated user to access unauthorized... CVE-2023-0661 6.5 MediumFebruary 3, 2023
• devolutions server, remote desktop manager +1 more Dashlane password and Keepass Server password in My Account Settings are not encrypted in the... CVE-2022-3781 6.5 MediumNovember 1, 2022
• devolutions server HTML injection vulnerability in secure messages of Devolutions Server before 2022.2 allows... CVE-2022-2316 5.4 MediumJuly 6, 2022