Skip to contentDevolutions vulnerabilities
Newest
- devolutions serverIncorrect privilege assignment vulnerability in HYPR Server allows Privilege Escalation.This...CVE-2026-17125.8 Medium
- devolutions serverJetAudio jetCast Server 2.0 Local SEH Buffer OverflowCVE-2019-256098.6 High
- devolutions server, mariadb +1 moreHeap-based Buffer Overflow in MariaDBCVE-2026-32710Public exploitFix available8.6 High
- devolutions serverImproper certificate validation in the PAM propagation WinRM connections
allows a network...CVE-2026-44348.1 High
- devolutions hub reporting serviceImproper certificate validation in Devolutions Hub Reporting Service
2025.3.1.1 and earlier...CVE-2026-43968.1 High
- devolutions powershell universalImproper input validation in the apps and endpoints configuration in PowerShell Universal before...CVE-2026-35635.5 Medium
- devolutions powershell universalMissing authorization checks on multiple gRPC service endpoints in PowerShell Universal before...CVE-2026-40648.3 High
- devolutions serverImproper access control in user and role restore API endpoints in Devolutions Server 2025.3.11.0...CVE-2026-36385.9 Medium
- devolutions serverImproper Enforcement of Behavioral Controls in Devolutions Server 2025.3.15 and earlier allows an...CVE-2026-31309.8 Critical
- devolutions serverImproper
input validation in the error message page in Devolutions Server 2025.3.15 and earlier...CVE-2026-32049.8 Critical
- devolutions remote desktop managerImproper
enforcement of the Disable password saving in vaults setting in the
connection entry...CVE-2026-25909.8 Critical
- devolutions serverAuthentication bypass in the Microsoft Entra ID (Azure AD) authentication mode in Devolutions...CVE-2026-32249.8 Critical
- devolutions powershell universalThe OpenID Connect (OIDC) authentication configuration in PowerShell
Universal before 2026.1.3...CVE-2026-32776.5 Medium
- devolutions serverSensitive
user account information is not encrypted in the database in Devolutions Server 2025.3...CVE-2026-32214.9 Medium
- devolutions serverImproper
access control in multiple DVLS REST API endpoints in Devolutions
Server 2025.3.14.0...CVE-2026-31316.5 Medium
- devolutions serverA permission cache poisoning vulnerability in Devolutions Server allows authenticated users to...CVE-2026-17684.3 Medium
- devolutions server, music-assistant music assistant server +1 moreMusic Assistant Server Path Traversal in Playlist Update API Allows Remote Code ExecutionCVE-2026-269758.8 High
- devolutions serverIncorrect Authorization vulnerability in virtual gateway component in Devolutions Server allows...CVE-2026-10077.6 High
- devolutions serverSQL Injection vulnerability in remote-sessions in Devolutions Server.This issue affects...CVE-2026-06109.8 Critical
- devolutions remote desktop managerExposure of sensitive information in the TeamViewer entry dashboard component in Devolutions...CVE-2026-07473.3 Low
- devolutions powershell universalCross-site Scripting vulnerability in Devolutions PowerShell Universal.This issue affects...CVE-2026-06186.1 Medium
- alteryx serverAlteryx Server status improper authenticationCVE-2025-150976.9 Medium
- devolutions serverAuthentication Bypass by Spoofing vulnerability in HYPR Server allows Identity Spoofing.This...CVE-2024-82737.1 High
- devolutions server, remote desktop manager +1 moreExposure of credentials in unintended requests in Devolutions Server, Remote Desktop Manager on...CVE-2025-136836.5 Medium
- devolutions serverExposure of credentials in unintended requests in Devolutions Server.This issue affects Server:...CVE-2025-137583.5 Low
- devolutions serverSQL Injection vulnerability in last usage logs in Devolutions Server.This issue affects...CVE-2025-137578.8 High
- devolutions serverExposure of email service credentials to users without administrative rights in Devolutions...CVE-2025-137654.3 Medium
- devolutions serverImproper privilege management during pre-MFA cookie handling in Devolutions Server 2025.3.5.0 and...CVE-2025-124858.8 High
- devolutions serverImproper access control in Devolutions Server 2025.3.5.0 and earlier allows a View-only user to...CVE-2025-128086.5 Medium
- devolutions serverImproper authorization in the temporary access workflow of Devolutions Server 2025.2.12.0 and...CVE-2025-119579.0 Critical
- devolutions serverAn improper input validation in the Security Dashboard ignored-tasks API of Devolutions Server...CVE-2025-119585.1 Medium
- devolutions server, mongodb +1 moreUse-after-free in the MongoDB server query planner may lead to crash or undefined behaviorCVE-2025-11979Fix available5.3 Medium
- devolutions serverImproper certificate validation when connecting to gateways in Devolutions Server 2025.3.2 and...CVE-2025-116198.8 High
- devolutions serverKaillera 0.86 Server DoS via Malformed UDP PacketCVE-2011-100208.7 High
- actfax serverActFax 4.32 Client Importer Buffer OverflowCVE-2012-10043Public exploit9.3 Critical
- devolutions serverDeadlock in PAM automatic check-in feature in Devolutions Server allows a password to remain...CVE-2025-83127.1 High
- devolutions serverUI synchronization issue in the Just-in-Time (JIT) access request approval interface in...CVE-2025-83535.9 Medium
- devolutions serverImproper access control in secure message component in Devolutions Server allows an authenticated...CVE-2025-67417.1 High
- devolutions serverUse of weak credentials in emergency authentication component in Devolutions Server allows an...CVE-2025-65239.5 Critical
- coloradoftp serverColoradoFTP Server <= 1.3 Build 8 Path Traversal Information DisclosureCVE-2025-341109.3 Critical
- devolutions serverImproper access control in permissions component in Devolutions Server 2025.1.10.0 and earlier...CVE-2025-06915.0 Medium
- devolutions serverImproper access control in users MFA feature in Devolutions Server 2025.1.7.0 and earlier allows...CVE-2025-53826.8 Medium
- devolutions serverImproper access control in Tor network blocking feature in Devolutions Server 2025.1.10.0 and...CVE-2025-37685.0 Medium
- devolutions serverImproper access control in user group management in Devolutions Server 2025.1.7.0 and earlier...CVE-2025-44338.7 High
- devolutions remote desktop managerExposure of private personal information to an unauthorized actor in the user vaults component of...CVE-2025-53347.5 High
- devolutions serverImproper privilege assignment in PAM JIT privilege sets in Devolutions
Server allows a PAM user...CVE-2025-44936.5 Medium
- devolutions serverImproper access control in PAM feature in Devolutions Server 2025.1.6.0 and earlier allows a PAM...CVE-2025-43164.3 Medium
- devolutions serverIncorrect privilege assignment in PAM JIT elevation feature in Devolutions Server 2025.1.5.0 and...CVE-2025-35176.3 Medium
- devolutions remote desktop managerImproper authorization in the variable component in Devolutions Remote Desktop Manager on Windows...CVE-2025-26006.8 Medium
- devolutions remote desktop managerInsufficient logging in the autotyping feature in Devolutions Remote Desktop Manager on Windows...CVE-2025-25625.4 Medium
- Show moreLoading…