Skip to content
CVE Tracker

Devolutions vulnerabilities

199 published CVEs name Devolutions among the affected products.

All 199 in the listAtom feed of new CVEs
Published CVEs
199
Last 12 months
104
Critical
12
Known exploited
0

Critical 12High 51Medium 114Low 15Not scored 7

CVEs per yearBy the year they were published

  1. 20211
  2. 20228
  3. 202330
  4. 202429
  5. 202533
  6. 202698

Newest CVEs

  • CVE-2026-120716

    Insertion of sensitive information into sent data in the identity provider user synchronization in Devolutions Server 2026.3.13.0 and earlier allows an…

    Devolutions · Server

    Not scored
  • CVE-2026-119636

    Improper release of expired privileged access checkouts in the PAM scheduled check-in task in Devolutions Server 2025.3.2.0 through 2026.2.22.0 allows an…

    Devolutions · Server

    Not scored
  • CVE-2026-120734

    Cleartext transmission of sensitive information in the email configuration test in Devolutions Server 2026.3.13.0 and earlier allows an authenticated user with…

    Devolutions · Server

    Not scored
  • CVE-2026-120715

    Server-side request forgery in the Active Directory credential validation in Devolutions Server 2026.3.12.0 and earlier allows an authenticated low-privileged…

    Devolutions · Server

    Not scored
  • CVE-2026-120733

    Cleartext storage of sensitive information in the user account data in Devolutions Server 2026.3.12.0 and earlier allows an attacker with read access to the…

    Devolutions · Server

    Not scored
  • CVE-2026-121580

    Server-side request forgery in the Jira ticketing filter lookup in Devolutions Server 2026.2.22.0 and earlier allows an authenticated low-privileged user to…

    Devolutions · Server

    Not scored
  • CVE-2026-116627

    Improper neutralization of input during web page generation ('Cross-site Scripting') in the notifications feature in Devolutions PowerShell Universal 2026.3.0…

    Devolutions · PowerShell Universal

    Not scored
  • CVE-2026-114487

    Missing authorization in the PAM AD computer import endpoint in Devolutions Server 2026.3.5.0 through 2026.3.10.0 and 2026.2.20.0 and earlier allows an…

    Devolutions · Server

    Medium4.3
  • CVE-2026-114486

    Incorrect authorization in the Devolutions Gateway token generation in Devolutions Server 2026.3.10.0 and earlier allows an authenticated non-administrative…

    Devolutions · Server

    Medium4.3
  • CVE-2026-114485

    Insufficient protection of sensitive information in the user list endpoint in Devolutions Server 2026.3.10.0 and earlier allows an authenticated attacker with…

    Devolutions · Server

    Medium4.3

Products with the most CVEs

  1. Server112
  2. Remote Desktop Manager49
  3. Devolutions Server17
  4. PowerShell Universal14
  5. Workspace2
  6. DVLS (Devolutions Server)1
  7. Gateway1
  8. Hub Reporting Service1
  9. Password Manager1
  10. Remote Desktop Manager PowerShell Module1

Most common weaknesses

  1. CWE-284 Improper access control21
  2. CWE-863 Incorrect authorization21
  3. CWE-862 Missing authorization18
  4. CWE-200 Exposure of sensitive information16
  5. CWE-295 Improper certificate validation9
  6. CWE-522 8
  7. CWE-287 Improper authentication7
  8. CWE-312 Cleartext storage of sensitive information6
  9. CWE-201 5
  10. CWE-639 Authorization bypass through a user-controlled key (IDOR)5