Product by Devolutions
Devolutions Server
116 known vulnerabilities in Devolutions Server (Devolutions), 0 of them actively exploited (CISA KEV).
Key figures
116
Vulnerabilities
0
Actively exploited (KEV)
0
Used by ransomware
8
Critical
Vulnerabilities
Actively exploited vulnerabilities (CISA KEV) first, then by priority. Click a column header to re-sort the table.
| Critical | CVE-2026-3204 | Devolutions Server: Improper Input Validation | 9.8 | |
| Critical | CVE-2026-3224 | Devolutions Server: Improper Authentication | 9.8 | |
| High | CVE-2022-33996 | Devolutions Server: security vulnerability | 8.8 | |
| Critical | CVE-2024-2921 | Devolutions Server: Improper Access Control | 9.8 | |
| High | CVE-2023-0953 | Devolutions Server: SQL Injection | 8.8 | |
| Critical | CVE-2021-23921 | Devolutions Server: Improper Access Control | 9.1 | |
| High | CVE-2023-0951 | Devolutions Server: Improper Access Control | 8.8 | |
| Critical | CVE-2026-3130 | Devolutions Server: Improper Enforcement of Behavioral Workflow | 9.8 | |
| High | CVE-2025-13757 | Devolutions Server: SQL Injection | 8.8 | |
| High | CVE-2026-17568 | Devolutions Server: Incorrect Authorization | 8.8 | |
| High | CVE-2026-14536 | Devolutions Server: Incorrect Authorization | 8.8 | |
| High | CVE-2025-12485 | Devolutions Server: Improper Privilege Management | 8.8 | |
| Critical | CVE-2025-6523 | Devolutions Server: Use of Weak Credentials | 7.7 | |
| High | CVE-2025-4433 | Devolutions Server: Improper Access Control | 8.8 | |
| High | CVE-2021-23924 | Devolutions Server: security vulnerability | 7.5 | |
| High | CVE-2024-2915 | Devolutions Server: Improper Access Control | 8.8 | |
| Critical | CVE-2026-0610 | Devolutions Server: SQL Injection | 9.8 | |
| High | CVE-2021-23923 | Devolutions Server: security vulnerability | 8.1 | |
| High | CVE-2023-5240 | Devolutions Server: Improper Access Control | 7.5 | |
| High | CVE-2025-2280 | Devolutions Server: Improper Access Control | 8.1 | |
| Medium | CVE-2026-110806 | Devolutions Server: Incorrect Authorization | 6.5 | |
| High | CVE-2025-2277 | Devolutions Server: Exposure of Sensitive Information to an Unauthorized Actor | 7.5 | |
| High | CVE-2021-28157 | Devolutions Server: SQL Injection | 7.2 | |
| High | CVE-2026-4924 | Devolutions Server: Weak Authentication | 8.2 | |
| Critical | CVE-2025-11957 | Devolutions Server: Authorization Bypass Through User-Controlled Key | 8.4 |