Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

3 records

Release: Devolutions Server 2026.3.11 Clear all filters
TI-2026-79311 CVE-2026-114487 · GHSA-qmr2-hh8c-f2cv

Devolutions Server PAM AD import endpoint lacks authorization checks

Priority LOW 21

Missing authorization in the PAM AD computer import endpoint in Devolutions Server 2026.3.5.0 through 2026.3.10.0 and 2026.2.20.0 and earlier allows an authenticated non-administrative user with a PAM license to create P…

CVSS 3.1MEDIUM 4.3 Network Low privileges No interaction EPSS 0.00198 Published 2026-10-22 Fixed in 2026.3.11, 2026.2.21 CWE-862
TI-2026-79304 CVE-2026-114486 · GHSA-prr7-6j7r-qgjg

Devolutions Server flaw lets users bypass gateway network access rules

Priority LOW 19

Incorrect authorization in the Devolutions Gateway token generation in Devolutions Server 2026.3.10.0 and earlier allows an authenticated non-administrative attacker to bypass the Network Access Rules of a virtual gatewa…

CVSS 3.1MEDIUM 4.3 Network Low privileges No interaction EPSS 0.00221 Published 2026-10-22 Fixed in 2026.3.11 CWE-863
TI-2026-79303 CVE-2026-114485 · GHSA-9v47-334m-r224

Sensitive MFA secrets exposed in Devolutions Server user list API

Priority LOW 20

Insufficient protection of sensitive information in the user list endpoint in Devolutions Server 2026.3.10.0 and earlier allows an authenticated attacker with delegated user view permissions to obtain the MFA secrets of…

CVSS 3.1MEDIUM 4.3 Network Low privileges No interaction EPSS 0.00241 Published 2026-10-22 Fixed in 2026.3.11 CWE-201