Devolutions Devolutions Server vulnerabilities

CVEs per yearBy the year they were published

1. 20222
2. 20238
3. 20241
4. 20252
5. 20264

Newest CVEs

• CVE-2026-12105

  Improper access control in Devolutions Server 2026.2.5, 2026.1.21 allows an authenticated user to access attachments via folder duplication with inherited…

  Devolutions · Devolutions Server

  Medium6.5
• CVE-2026-12117

  Improper access control in the social login connection endpoint in Devolutions Server 2026.2.5 allows an authenticated vault member to enumerate social login…

  Devolutions · Devolutions Server

  Medium4.3
• CVE-2026-11890

  Improper access control in PAM account discovery results in Devolutions Server 2026.2.5, 2026.1.21 allows an authenticated user to retrieve account discovery…

  Devolutions · Devolutions Server

  Medium4.3
• CVE-2026-1768

  A permission cache poisoning vulnerability in Devolutions Server allows authenticated users to bypass permissions to access entries.This issue affects…

  Devolutions · Devolutions Server

  Medium4.3
• CVE-2025-11619

  Improper certificate validation when connecting to gateways in Devolutions Server 2025.3.2 and earlier allows attackers in MitM position to intercept traffic.

  Devolutions · Devolutions Server

  High8.8
• CVE-2025-3517

  Incorrect privilege assignment in PAM JIT elevation feature in Devolutions Server 2025.1.5.0 and earlier allows a PAM user to elevate a previously configured…

  Devolutions · Devolutions Server

  Medium6.3
• CVE-2024-6512

  Authorization bypass in the PAM access request approval mechanism in Devolutions Server 2024.2.10 and earlier allows authenticated users with permissions to…

  Devolutions · Devolutions Server

  Medium6.5
• CVE-2023-5358

  Improper access control in Report log filters feature in Devolutions Server 2023.2.10.0 and earlier allows attackers to retrieve logs from vaults or entries…

  Devolutions · Devolutions Server

  Medium5.3
• CVE-2023-2445

  Improper access control in Subscriptions Folder path filter in Devolutions Server 2023.1.1 and earlier allows attackers with administrator privileges to…

  Devolutions · Devolutions Server

  Medium4.9
• CVE-2023-2118

  Insufficient access control in support ticket feature in Devolutions Server 2023.1.5.0 and below allows an authenticated attacker to send support tickets and…

  Devolutions · Devolutions Server

  Medium4.3