SE
Product
Server
106
CVEs
0
On KEV
9.8
Max CVSS
10
New 30D
Severity mix
Critical 5High 26Medium 61Low 11
Watch
Add Server to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2026-3130 | 9.8 | Mar 3 | Improper Enforcement of Behavioral Controls in Devolutions Server 2025.3.15 and earlier allows an authenticated attacker with the delete permission to delete a PAM account that is… Affected: before 2025.3.16 |
| CVE-2026-3204 | 9.8 | Mar 3 | Improper input validation in the error message page in Devolutions Server 2025.3.16 and earlier allows remote attackers to spoof the displayed error message via a specially… Affected: through 2025.3.16 |
| CVE-2026-3224 | 9.8 | Mar 3 | Authentication bypass in the Microsoft Entra ID (Azure AD) authentication mode in Devolutions Server 2025.3.15.0 and earlier allows an unauthenticated user to authenticate as an… Affected: through 2025.3.15.0 |
| CVE-2026-0610 | 9.8 | Jan 19 | SQL Injection vulnerability in remote-sessions in Devolutions Server.This issue affects Devolutions Server 2025.3.1 through 2025.3.12 Affected: 2025.3.1 through 2025.3.12 |
| CVE-2024-2921 | 9.8 | Mar 26 | Improper access control in PAM vault permissions in Devolutions Server 2024.1.10.0 and earlier allows an authenticated user with access to the PAM to access unauthorized PAM… Affected: through 2024.1.6 |
Showing 5