Skip to contentDevolutions vulnerabilities
Newest
- devolutions serverImproper input validation in the PAM AD discovery endpoints in
Devolutions Server 2026.2.4.0...CVE-2026-127552.7 Low
- devolutions unigetuiUse of an incorrectly resolved name or reference in the pinget backend
in Devolutions UniGetUI...CVE-2026-106967.5 High
- devolutions serverImproper access control in Devolutions Server 2026.2.5, 2026.1.21 allows
an authenticated user...CVE-2026-121056.5 Medium
- devolutions serverImproper access control in the social login connection endpoint in
Devolutions Server 2026.2.5...CVE-2026-121174.3 Medium
- devolutions serverImproper access control in PAM account discovery results in Devolutions
Server 2026.2.5, 2026.1...CVE-2026-118904.3 Medium
- devolutions remote desktop managerImproper host validation in the social login autofill feature in
Devolutions Remote Desktop...CVE-2026-121625.5 Medium
- devolutions remote desktop managerImproper input validation in the SSH Elevate Shell feature in
Devolutions Remote Desktop Manager...CVE-2026-121618.8 High
- devolutions powershell universalImproper access control on the API documentation endpoint in PowerShell UniversalCVE-2026-86945.3 Medium
- devolutions serverImproper neutralization of special elements in the built-in PAM provider password rotation...CVE-2026-105446.5 Medium
- devolutions serverMissing authorization in the deleted user groups API in Devolutions Server allows an...CVE-2026-107874.3 Medium
- devolutions serverImproper access control in the ticketing integration settings in Devolutions Server allows an...CVE-2026-107866.5 Medium
- devolutions serverSync-in Server: SSRF protection bypass via IPv4-mapped IPv6 addresses in regExpPrivateIPCVE-2026-47684Fix available7.7 High
- devolutions serverImproper access control in the PAM account discovery feature in Devolutions Server 2026.1.19 and...CVE-2026-95225.4 Medium
- devolutions serverImproper access control in the permission validation component in Devolutions Server 2026.1.19...CVE-2026-95905.3 Medium
- devolutions server, mariadb, red hat enterprise linux 10 +6 more +8 moreMariaDB server has unsafe parameter handling in `wsrep_notify_cmd`CVE-2026-49261Fix available10.0 Critical
- devolutions server, mariadb, red hat enterprise linux 7 +6 more +8 moreMariaDB: unsafe usage of `wsrep_sst_receive_address` values on the joiner sideCVE-2026-48165Fix available8.0 High
- devolutions server, mariadb, red hat enterprise linux 10 +5 more +7 moreMariaDB: wsrep SST unsafe parameter handling on the donor side (rsync)CVE-2026-48163Fix available8.0 High
- devolutions server, mariadb, red hat enterprise linux 10 +4 more +6 moreMariaDB: FILE privilege was not checked for subqueries in the FROM clauseCVE-2026-44173Fix available5.0 Medium
- devolutions server, mariadb, red hat enterprise linux 10 +6 more +8 moreMariaDB: mysql_real_escape_string() incorrectly handled big5CVE-2026-44172Fix available6.9 Medium
- devolutions server, mariadb +1 moreMariaDB: path traversal in mbstreamCVE-2026-44171Fix available6.3 Medium
- devolutions server, mariadb, red hat enterprise linux 10 +5 more +7 moreMariaDB: Argument injection in CONNECT REST Xcurl on Windows via unsanitized URLCVE-2026-44170Fix available6.3 Medium
- devolutions server, mariadb +1 moreMariaDB: Authorization bypass in role-based routine-level privilege check exposes stored routine definitionsCVE-2026-44169Fix available4.3 Medium
- devolutions server, mariadb, red hat enterprise linux 10 +4 more +6 moreMariaDB: wsrep SST unsafe parameter handling on the donor sideCVE-2026-44168Fix available8.0 High
- devolutions serverImproper authorization in the Active Directory browsing feature in Devolutions Server allows a...CVE-2026-73257.1 High
- devolutions serverMissing authorization in the entry status management feature in Devolutions Server allows a non...CVE-2026-92515.4 Medium
- devolutions serverImproper access control in the entry activity log feature in Devolutions Server allows an...CVE-2026-51714.3 Medium
- devolutions serverImproper enforcement of the sealed-entry workflow in the entry sensitive-data retrieval feature...CVE-2026-84772.7 Low
- devolutions serverImproper access control in the entry documentation and attachment features in Devolutions Server...CVE-2026-92464.3 Medium
- devolutions serverMissing authorization in the user profile update feature in Devolutions Server allows an...CVE-2026-92244.3 Medium
- devolutions serverUnverified password change in Devolutions Server allows an attacker to change a user's password...CVE-2026-92493.1 Low
- devolutions serverImproper input validation in the external authentication provider flow in Devolutions Server...CVE-2026-92455.0 Medium
- devolutions serverInsufficient logging in the entry export feature in Devolutions Server allows an authenticated...CVE-2026-92472.4 Low
- devolutions serverAuthorization bypass in the entry duplication feature in Devolutions Server allows an...CVE-2026-92482.6 Low
- devolutions serverMissing authorization in the vault import feature in Devolutions Server 2026.1.16.0 and earlier...CVE-2026-92234.3 Medium
- devolutions serverImproper handling of factor key state in the multi-factor authentication management feature in...CVE-2026-90477.6 High
- devolutions serverImproper access control in the notification management endpoints in Devolutions Server allows an...CVE-2026-51464.3 Medium
- devolutions serverMissing authorization in the PAM module in Devolutions Server allows an authenticated user with a...CVE-2026-84074.3 Medium
- bitwarden serverBitwarden Server < 2026.4.1 Authentication Bypass via SCIM API KeyCVE-2026-436408.6 High
- bitwarden serverBitwarden Server < 2026.4.0 Missing Authorization via Provider ClientsCVE-2026-436398.9 High
- bitwarden serverBitwarden Server < 2026.4.1 Missing Authorization via Organization Cipher ImportCVE-2026-436385.3 Medium
- devolutions serverImproper
access control in the vault documentation feature in Devolutions Server
2026.1.14.0...CVE-2026-67066.5 Medium
- devolutions serverUsername Enumeration via Timing AttackCVE-2026-41161Fix available6.9 Medium
- devolutions serverImproper input validation in the gateway health check feature in Devolutions Server allows a low...CVE-2026-49894.3 Medium
- devolutions serverImproper access control in the multi-factor authentication (MFA) management API in Devolutions...CVE-2026-51755.0 Medium
- devolutions serverImproper access control in the users MFA feature in Devolutions Server allows an authenticated...CVE-2026-49255.0 Medium
- devolutions serverExposure of sensitive information in the users MFA feature in Devolutions Server allows users...CVE-2026-49276.5 Medium
- devolutions serverImproper
authentication in the two-factor authentication (2FA) feature in
Devolutions Server...CVE-2026-49248.2 High
- devolutions serverImproper authentication in the OAuth login functionality in Devolutions Server 2026.1.11 and...CVE-2026-48288.2 High
- devolutions serverImproper authentication in the external OAuth authentication flow in Devolutions Server 2026.1.11...CVE-2026-48295.4 Medium
- devolutions server, hypr +1 moreAuthorization bypass through User-Controlled key vulnerability in HYPR Server allows Privilege...CVE-2026-24145.6 Medium
- Show moreLoading…