Devolutions Server vulnerabilities

• devolutions server Server-side request forgery in PingOne groups endpoint in Devolutions Server 2026.3.8.0 and... CVE-2026-110805 2.6 LowOctober 16, 2026
• devolutions server Improperly controlled modification of JIT elevation settings in PAM checkout in Devolutions... CVE-2026-110804 4.3 MediumOctober 16, 2026
• devolutions server Incorrect authorization in add-on properties in Devolutions Server 2026.3.8.0 and earlier allows... CVE-2026-110806 6.5 MediumOctober 16, 2026
• devolutions server Improper access control in asset contact password in Devolutions Server 2026.3.8.0 and earlier... CVE-2026-110287 4.3 MediumOctober 16, 2026
• devolutions server Improper access control in the PAM password history endpoints in Devolutions Server allows an... CVE-2026-17570 4.3 MediumJuly 27, 2026
• devolutions server Improper access control in the NetBox synchronizer in Devolutions Server allows an authenticated... CVE-2026-17569 4.3 MediumJuly 27, 2026
• devolutions server Improper access control in the role membership management endpoint in Devolutions Server allows... CVE-2026-17568 8.8 HighJuly 27, 2026
• devolutions server Improper authorization in the secure messages deletion endpoint in Devolutions Server 2026.2.11,... CVE-2026-15058 3.1 LowJuly 14, 2026
• devolutions server Insertion of sensitive information into a file in the Recovery Kit response file generation... CVE-2026-15642 3.3 LowJuly 14, 2026
• devolutions server Improper authorization in the access request status endpoint in Devolutions Server 2026.2.11,... CVE-2026-15641 7.1 HighJuly 14, 2026
• devolutions server Improper authorization in the PAM SSH key and certificate retrieval endpoints in Devolutions... CVE-2026-15637 7.5 HighJuly 14, 2026
• devolutions server Improper enforcement of a mandatory multi-factor authentication policy in Devolutions Server 2026... CVE-2026-14536 8.8 HighJuly 6, 2026
• devolutions server Improper input validation in the PAM AD discovery endpoints in Devolutions Server 2026.2.4.0... CVE-2026-12755 2.7 LowJune 25, 2026
• devolutions server Improper access control in Devolutions Server 2026.2.5, 2026.1.21 allows an authenticated user... CVE-2026-12105 6.5 MediumJune 16, 2026
• devolutions server Improper access control in the social login connection endpoint in Devolutions Server 2026.2.5... CVE-2026-12117 4.3 MediumJune 16, 2026
• devolutions server Improper access control in PAM account discovery results in Devolutions Server 2026.2.5, 2026.1... CVE-2026-11890 4.3 MediumJune 16, 2026
• devolutions server Improper neutralization of special elements in the built-in PAM provider password rotation... CVE-2026-10544 6.5 MediumJune 8, 2026
• devolutions server Missing authorization in the deleted user groups API in Devolutions Server allows an... CVE-2026-10787 4.3 MediumJune 8, 2026
• devolutions server Improper access control in the ticketing integration settings in Devolutions Server allows an... CVE-2026-10786 6.5 MediumJune 8, 2026
• devolutions server Improper access control in the PAM account discovery feature in Devolutions Server 2026.1.19 and... CVE-2026-9522 5.4 MediumJune 2, 2026
• devolutions server Improper access control in the permission validation component in Devolutions Server 2026.1.19... CVE-2026-9590 5.3 MediumJune 2, 2026
• devolutions server Improper authorization in the Active Directory browsing feature in Devolutions Server allows a... CVE-2026-7325 7.1 HighMay 22, 2026
• devolutions server Missing authorization in the entry status management feature in Devolutions Server allows a non... CVE-2026-9251 5.4 MediumMay 22, 2026
• devolutions server Improper access control in the entry activity log feature in Devolutions Server allows an... CVE-2026-5171 4.3 MediumMay 22, 2026
• devolutions server Improper enforcement of the sealed-entry workflow in the entry sensitive-data retrieval feature... CVE-2026-8477 2.7 LowMay 22, 2026
• devolutions server Improper access control in the entry documentation and attachment features in Devolutions Server... CVE-2026-9246 4.3 MediumMay 22, 2026
• devolutions server Missing authorization in the user profile update feature in Devolutions Server allows an... CVE-2026-9224 4.3 MediumMay 22, 2026
• devolutions server Unverified password change in Devolutions Server allows an attacker to change a user's password... CVE-2026-9249 3.1 LowMay 22, 2026
• devolutions server Improper input validation in the external authentication provider flow in Devolutions Server... CVE-2026-9245 5.0 MediumMay 22, 2026
• devolutions server Insufficient logging in the entry export feature in Devolutions Server allows an authenticated... CVE-2026-9247 2.4 LowMay 22, 2026
• devolutions server Authorization bypass in the entry duplication feature in Devolutions Server allows an... CVE-2026-9248 2.6 LowMay 22, 2026
• devolutions server Missing authorization in the vault import feature in Devolutions Server  2026.1.16.0 and earlier... CVE-2026-9223 4.3 MediumMay 22, 2026
• devolutions server Improper handling of factor key state in the multi-factor authentication management feature in... CVE-2026-9047 7.6 HighMay 22, 2026
• devolutions server Improper access control in the notification management endpoints in Devolutions Server allows an... CVE-2026-5146 4.3 MediumMay 12, 2026
• devolutions server Missing authorization in the PAM module in Devolutions Server allows an authenticated user with a... CVE-2026-8407 4.3 MediumMay 12, 2026
• devolutions server Improper access control in the vault documentation feature in Devolutions Server 2026.1.14.0... CVE-2026-6706 6.5 MediumApril 28, 2026
• devolutions server Improper input validation in the gateway health check feature in Devolutions Server allows a low... CVE-2026-4989 4.3 MediumApril 1, 2026
• devolutions server Improper access control in the multi-factor authentication (MFA) management API in Devolutions... CVE-2026-5175 5.0 MediumApril 1, 2026
• devolutions server Improper access control in the users MFA feature in Devolutions Server allows an authenticated... CVE-2026-4925 5.0 MediumApril 1, 2026
• devolutions server Exposure of sensitive information in the users MFA feature in Devolutions Server allows users... CVE-2026-4927 6.5 MediumApril 1, 2026
• devolutions server Improper authentication in the two-factor authentication (2FA) feature in Devolutions Server... CVE-2026-4924 8.2 HighApril 1, 2026
• devolutions server Improper authentication in the OAuth login functionality in Devolutions Server 2026.1.11 and... CVE-2026-4828 8.2 HighApril 1, 2026
• devolutions server Improper authentication in the external OAuth authentication flow in Devolutions Server 2026.1.11... CVE-2026-4829 5.4 MediumApril 1, 2026
• devolutions server Improper certificate validation in the PAM propagation WinRM connections allows a network... CVE-2026-4434 8.1 HighMarch 20, 2026
• devolutions server Improper access control in user and role restore API endpoints in Devolutions Server 2025.3.11.0... CVE-2026-3638 5.9 MediumMarch 9, 2026
• devolutions server Improper Enforcement of Behavioral Controls in Devolutions Server 2025.3.15 and earlier allows an... CVE-2026-3130 9.8 CriticalMarch 3, 2026
• devolutions server Improper input validation in the error message page in Devolutions Server 2025.3.15 and earlier... CVE-2026-3204 9.8 CriticalMarch 3, 2026
• devolutions server Authentication bypass in the Microsoft Entra ID (Azure AD) authentication mode in Devolutions... CVE-2026-3224 9.8 CriticalMarch 3, 2026
• devolutions server Sensitive user account information is not encrypted in the database in Devolutions Server 2025.3... CVE-2026-3221 4.9 MediumFebruary 25, 2026
• devolutions server Improper access control in multiple DVLS REST API endpoints in Devolutions Server 2025.3.14.0... CVE-2026-3131 6.5 MediumFebruary 24, 2026
• Show olderLoading…