Read the docs

Devolutions

Records213All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical14CVSS 9.0–10.0
CVSS high63CVSS 7.0–8.9

Exploited now

Devolutions records in CISA KEV

No Devolutions vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records
Devolutions Server 116 records MEDIUM Remote Desktop Manager 53 records MEDIUM Powershell Universal 6 records MEDIUM Workspace 3 records LOW Devolutions Gateway 1 record MEDIUM Gfwx 1 record LOW Hub Reporting Service 1 record LOW Password Hub 1 record LOW

Records

1 record in Hub Reporting Service · all components

TI-2026-03824 CVE-2026-4396 · GHSA-cpwq-8448-9qv3

Improper certificate validation in Devolutions Hub Reporting Service

Priority LOW 35

Improper certificate validation in Devolutions Hub Reporting Service 2025.3.1.1 and earlier allows a network attacker to perform a man-in-the-middle attack via disabled TLS certificate verification.

CVSS 3.1HIGH 8.3 Adjacent network No auth No interaction EPSS 0.00152 Published 2026-03-18 No fix listed CWE-295
Open these records in search →