Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

2 records

Release: Devolutions Server 2026.2.23.0 Clear all filters
TI-2026-84579 CVE-2026-119636 · GHSA-v65m-vc6q-3v2c

Expired PAM checkouts not released in Devolutions Server

Priority MEDIUM 40

Improper release of expired privileged access checkouts in the PAM scheduled check-in task in Devolutions Server 2025.3.2.0 through 2026.2.22.0 allows an authenticated user with checkout rights on a PAM account to retain…

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.00447 Published 2026-11-03 Fixed in 2026.2.23.0 CWE-772
TI-2026-84567 CVE-2026-121580 · GHSA-7vf8-5cw6-wvpx

Server-side request forgery in Devolutions Server Jira filter lookup

Priority LOW 37

Server-side request forgery in the Jira ticketing filter lookup in Devolutions Server 2026.2.22.0 and earlier allows an authenticated low-privileged user to obtain the stored Jira service account credentials via an attac…

CVSS 3.1HIGH 8.1 Network Low privileges No interaction EPSS 0.00264 Published 2026-11-03 Fixed in 2026.2.23.0 CWE-918