Product by Devolutions
Devolutions Server
110 known vulnerabilities in Devolutions Server (Devolutions), 0 of them actively exploited (CISA KEV).
Key figures
110
Vulnerabilities
0
Actively exploited (KEV)
0
Used by ransomware
7
Critical
Vulnerabilities
Actively exploited vulnerabilities (CISA KEV) first, then by priority. Click a column header to re-sort the table.
| Critical | CVE-2026-3204 | Devolutions Server: Improper Input Validation | 9.8 | |
| Critical | CVE-2026-3224 | Devolutions Server: Improper Authentication | 9.8 | |
| Critical | CVE-2024-2921 | Devolutions Server: Improper Access Control | 9.8 | |
| Critical | CVE-2026-3130 | Devolutions Server: Improper Enforcement of Behavioral Workflow | 9.8 | |
| High | CVE-2025-13757 | Devolutions Server: SQL Injection | 8.8 | |
| High | CVE-2026-17568 | Devolutions Server: Incorrect Authorization | 8.8 | |
| High | CVE-2026-14536 | Devolutions Server: Incorrect Authorization | 8.8 | |
| High | CVE-2025-12485 | Devolutions Server: Improper Privilege Management | 8.8 | |
| Medium | CVE-2026-105485 | Devolutions Server: Authentication Bypass by Capture-replay | 6.8 | |
| Critical | CVE-2025-6523 | Devolutions Server: Use of Weak Credentials | 7.7 | |
| High | CVE-2025-4433 | Devolutions Server: Improper Access Control | 8.8 | |
| High | CVE-2024-2915 | Devolutions Server: Improper Access Control | 8.8 | |
| High | CVE-2026-105488 | Devolutions Server: Missing Authorization | 7.1 | |
| Critical | CVE-2026-0610 | Devolutions Server: SQL Injection | 9.8 | |
| High | CVE-2026-100288 | Devolutions Server: Cleartext Storage of Sensitive Information | 7.2 | |
| High | CVE-2023-5240 | Devolutions Server: Improper Access Control | 7.5 | |
| Medium | CVE-2026-9226 | Devolutions Server: Authentication Bypass by Capture-replay | 6.8 | |
| High | CVE-2025-2280 | Devolutions Server: Improper Access Control | 8.1 | |
| Medium | CVE-2026-100286 | Devolutions Server: Exposure of Sensitive Information to an Unauthorized Actor | 6.5 | |
| Medium | CVE-2026-110806 | Devolutions Server: Incorrect Authorization | 6.5 | |
| High | CVE-2025-2277 | Devolutions Server: Exposure of Sensitive Information to an Unauthorized Actor | 7.5 | |
| High | CVE-2026-4924 | Devolutions Server: Weak Authentication | 8.2 | |
| Critical | CVE-2025-11957 | Devolutions Server: Authorization Bypass Through User-Controlled Key | 8.4 | |
| Medium | CVE-2023-5575 | Devolutions Server: Improper Access Control | 6.5 | |
| High | CVE-2026-9047 | Devolutions Server: Authentication Bypass by Primary Weakness | 7.6 |