Devolutions Server vulnerabilities

CVEs per yearBy the year they were published

1. 20235
2. 202413
3. 202523
4. 202671

Newest CVEs

• CVE-2026-120716

  Insertion of sensitive information into sent data in the identity provider user synchronization in Devolutions Server 2026.3.13.0 and earlier allows an…

  Devolutions · Server

  Not scored
• CVE-2026-119636

  Improper release of expired privileged access checkouts in the PAM scheduled check-in task in Devolutions Server 2025.3.2.0 through 2026.2.22.0 allows an…

  Devolutions · Server

  Not scored
• CVE-2026-120734

  Cleartext transmission of sensitive information in the email configuration test in Devolutions Server 2026.3.13.0 and earlier allows an authenticated user with…

  Devolutions · Server

  Not scored
• CVE-2026-120715

  Server-side request forgery in the Active Directory credential validation in Devolutions Server 2026.3.12.0 and earlier allows an authenticated low-privileged…

  Devolutions · Server

  Not scored
• CVE-2026-120733

  Cleartext storage of sensitive information in the user account data in Devolutions Server 2026.3.12.0 and earlier allows an attacker with read access to the…

  Devolutions · Server

  Not scored
• CVE-2026-121580

  Server-side request forgery in the Jira ticketing filter lookup in Devolutions Server 2026.2.22.0 and earlier allows an authenticated low-privileged user to…

  Devolutions · Server

  Not scored
• CVE-2026-114487

  Missing authorization in the PAM AD computer import endpoint in Devolutions Server 2026.3.5.0 through 2026.3.10.0 and 2026.2.20.0 and earlier allows an…

  Devolutions · Server

  Medium4.3
• CVE-2026-114486

  Incorrect authorization in the Devolutions Gateway token generation in Devolutions Server 2026.3.10.0 and earlier allows an authenticated non-administrative…

  Devolutions · Server

  Medium4.3
• CVE-2026-114485

  Insufficient protection of sensitive information in the user list endpoint in Devolutions Server 2026.3.10.0 and earlier allows an authenticated attacker with…

  Devolutions · Server

  Medium4.3
• CVE-2026-110805

  Server-side request forgery in PingOne groups endpoint in Devolutions Server 2026.3.8.0 and earlier allows an authenticated low-privileged user to exfiltrate…

  Devolutions · Server

  Low2.6