Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

3 records

Release: Devolutions Server 2026.3.8 Clear all filters
TI-2026-68602 CVE-2026-105488 · GHSA-w745-4j22-6fw5

Missing authorization in Devolutions Server global vault

Priority LOW 31

Missing authorization in the global vault in Devolutions Server 2026.3.7.0 and earlier allows an authenticated user with only the global vault view permission to modify and delete global contact and folder entries.

CVSS 3.1HIGH 7.1 Network Low privileges No interaction EPSS 0.00259 Published 2026-10-06 Fixed in 2026.3.8 CWE-862
TI-2026-68601 CVE-2026-105485 · GHSA-h4fx-378p-mcpj

Authentication bypass in Devolutions Server device authorization flow

Priority LOW 32

Authentication bypass OAuth device authorization flow in Devolutions Server 2026.3.7.0 and earlier allows a remote attacker to take over a user's account via replay of a captured device verification link by an authentica…

CVSS 3.1MEDIUM 6.8 Network No auth User interaction EPSS 0.00404 Published 2026-10-06 Fixed in 2026.3.8 CWE-294
TI-2026-68494 CVE-2026-9226 · GHSA-jfrq-j4wj-3h93

Authentication bypass in Devolutions Server Azure AD login flow

Priority LOW 31

Authentication bypass in the Azure AD external login flow in Devolutions Server 2026.3.7.0 and earlier allows a remote attacker to take over a user's account via replay of a captured login-session token exposed in a redi…

CVSS 3.1MEDIUM 6.8 Adjacent network No auth No interaction EPSS 0.0021 Published 2026-10-06 Fixed in 2026.3.8 CWE-294