Sync-in Server vulnerabilities

• devolutions server Username Enumeration via Timing Attack CVE-2026-41161 Fix available 6.9 MediumApril 15, 2026
• sync-in server Sync-in Server has a stored cross-site scripting (XSS) vulnerability CVE-2025-67438 Fix available 6.1 MediumFebruary 20, 2026
• sync-in server Directory traversal vulnerability in Sync In server thru 1.1.1 allowing authenticated attackers... CVE-2025-56869 5.3 MediumSeptember 19, 2025