Skip to contentDevolutions Server vulnerabilities
- devolutions server, mariadb, red hat enterprise linux 10 +5 more +7 moreMariaDB: wsrep SST unsafe parameter handling on the donor side (rsync)CVE-2026-48163Fix available8.0 High
- devolutions server, mariadb, red hat enterprise linux 10 +4 more +6 moreMariaDB: FILE privilege was not checked for subqueries in the FROM clauseCVE-2026-44173Fix available5.0 Medium
- devolutions server, mariadb, red hat enterprise linux 10 +6 more +8 moreMariaDB: mysql_real_escape_string() incorrectly handled big5CVE-2026-44172Fix available6.9 Medium
- devolutions server, mariadb +1 moreMariaDB: path traversal in mbstreamCVE-2026-44171Fix available6.3 Medium
- devolutions server, mariadb, red hat enterprise linux 10 +5 more +7 moreMariaDB: Argument injection in CONNECT REST Xcurl on Windows via unsanitized URLCVE-2026-44170Fix available6.3 Medium
- devolutions server, mariadb +1 moreMariaDB: Authorization bypass in role-based routine-level privilege check exposes stored routine definitionsCVE-2026-44169Fix available4.3 Medium
- devolutions server, mariadb, red hat enterprise linux 10 +4 more +6 moreMariaDB: wsrep SST unsafe parameter handling on the donor sideCVE-2026-44168Fix available8.0 High
- devolutions serverImproper authorization in the Active Directory browsing feature in Devolutions Server allows a...CVE-2026-73257.1 High
- devolutions serverMissing authorization in the entry status management feature in Devolutions Server allows a non...CVE-2026-92515.4 Medium
- devolutions serverImproper access control in the entry activity log feature in Devolutions Server allows an...CVE-2026-51714.3 Medium
- devolutions serverImproper enforcement of the sealed-entry workflow in the entry sensitive-data retrieval feature...CVE-2026-84772.7 Low
- devolutions serverImproper access control in the entry documentation and attachment features in Devolutions Server...CVE-2026-92464.3 Medium
- devolutions serverMissing authorization in the user profile update feature in Devolutions Server allows an...CVE-2026-92244.3 Medium
- devolutions serverUnverified password change in Devolutions Server allows an attacker to change a user's password...CVE-2026-92493.1 Low
- devolutions serverImproper input validation in the external authentication provider flow in Devolutions Server...CVE-2026-92455.0 Medium
- devolutions serverInsufficient logging in the entry export feature in Devolutions Server allows an authenticated...CVE-2026-92472.4 Low
- devolutions serverAuthorization bypass in the entry duplication feature in Devolutions Server allows an...CVE-2026-92482.6 Low
- devolutions serverMissing authorization in the vault import feature in Devolutions Server 2026.1.16.0 and earlier...CVE-2026-92234.3 Medium
- devolutions serverImproper handling of factor key state in the multi-factor authentication management feature in...CVE-2026-90477.6 High
- devolutions serverImproper access control in the notification management endpoints in Devolutions Server allows an...CVE-2026-51464.3 Medium
- devolutions serverMissing authorization in the PAM module in Devolutions Server allows an authenticated user with a...CVE-2026-84074.3 Medium
- bitwarden serverBitwarden Server < 2026.4.1 Authentication Bypass via SCIM API KeyCVE-2026-436408.6 High
- bitwarden serverBitwarden Server < 2026.4.0 Missing Authorization via Provider ClientsCVE-2026-436398.9 High
- bitwarden serverBitwarden Server < 2026.4.1 Missing Authorization via Organization Cipher ImportCVE-2026-436385.3 Medium
- devolutions serverImproper
access control in the vault documentation feature in Devolutions Server
2026.1.14.0...CVE-2026-67066.5 Medium
- devolutions serverUsername Enumeration via Timing AttackCVE-2026-41161Fix available6.9 Medium
- devolutions serverImproper input validation in the gateway health check feature in Devolutions Server allows a low...CVE-2026-49894.3 Medium
- devolutions serverImproper access control in the multi-factor authentication (MFA) management API in Devolutions...CVE-2026-51755.0 Medium
- devolutions serverImproper access control in the users MFA feature in Devolutions Server allows an authenticated...CVE-2026-49255.0 Medium
- devolutions serverExposure of sensitive information in the users MFA feature in Devolutions Server allows users...CVE-2026-49276.5 Medium
- devolutions serverImproper
authentication in the two-factor authentication (2FA) feature in
Devolutions Server...CVE-2026-49248.2 High
- devolutions serverImproper authentication in the OAuth login functionality in Devolutions Server 2026.1.11 and...CVE-2026-48288.2 High
- devolutions serverImproper authentication in the external OAuth authentication flow in Devolutions Server 2026.1.11...CVE-2026-48295.4 Medium
- devolutions server, hypr +1 moreAuthorization bypass through User-Controlled key vulnerability in HYPR Server allows Privilege...CVE-2026-24145.6 Medium
- devolutions serverIncorrect privilege assignment vulnerability in HYPR Server allows Privilege Escalation.This...CVE-2026-17125.8 Medium
- devolutions serverJetAudio jetCast Server 2.0 Local SEH Buffer OverflowCVE-2019-256098.6 High
- devolutions server, mariadb +1 moreHeap-based Buffer Overflow in MariaDBCVE-2026-32710Public exploitFix available8.6 High
- devolutions serverImproper certificate validation in the PAM propagation WinRM connections
allows a network...CVE-2026-44348.1 High
- devolutions serverImproper access control in user and role restore API endpoints in Devolutions Server 2025.3.11.0...CVE-2026-36385.9 Medium
- devolutions serverImproper Enforcement of Behavioral Controls in Devolutions Server 2025.3.15 and earlier allows an...CVE-2026-31309.8 Critical
- devolutions serverImproper
input validation in the error message page in Devolutions Server 2025.3.15 and earlier...CVE-2026-32049.8 Critical
- devolutions serverAuthentication bypass in the Microsoft Entra ID (Azure AD) authentication mode in Devolutions...CVE-2026-32249.8 Critical
- devolutions serverSensitive
user account information is not encrypted in the database in Devolutions Server 2025.3...CVE-2026-32214.9 Medium
- devolutions serverImproper
access control in multiple DVLS REST API endpoints in Devolutions
Server 2025.3.14.0...CVE-2026-31316.5 Medium
- devolutions serverA permission cache poisoning vulnerability in Devolutions Server allows authenticated users to...CVE-2026-17684.3 Medium
- devolutions server, music-assistant music assistant server +1 moreMusic Assistant Server Path Traversal in Playlist Update API Allows Remote Code ExecutionCVE-2026-269758.8 High
- devolutions serverIncorrect Authorization vulnerability in virtual gateway component in Devolutions Server allows...CVE-2026-10077.6 High
- devolutions serverSQL Injection vulnerability in remote-sessions in Devolutions Server.This issue affects...CVE-2026-06109.8 Critical
- alteryx serverAlteryx Server status improper authenticationCVE-2025-150976.9 Medium
- devolutions serverAuthentication Bypass by Spoofing vulnerability in HYPR Server allows Identity Spoofing.This...CVE-2024-82737.1 High
- Show moreLoading…