Devolutions

    Dashboard / Vendors

    Products: 12
    Vulnerabilities: 212
    Known Exploited: 0
    12
    Critical Level Threats
    60
    High Level Threats
    118
    Medium Level Threats
    16
    Low Level Threats

    Vulnerabilities

    100806040200
    JanFebMarAprMayJunJulAugSepOctNovDec
    Critical Level Threats
    High Level Threats
    Medium Level Threats
    Low Level Threats

    Products Security index

    Actions
    Items Per Page

    Vulnerabilities

    CVE-2026-120716

    Insertion of sensitive information into sent data in the identity provider user synchronization in Devolutions Server 2026.3.13.0 and earlier allows an authenticated user with the delegated permission to update users from the identity provider to obtain other users' MFA secrets via the synchronization API response.

    Last Modified: Nov 03, 2026
    Published: Nov 03, 2026

    CVE-2026-119636

    Unauthorized Persistent Privileged Access via Expired PAM Checkouts

    Last Modified: Nov 03, 2026
    Published: Nov 03, 2026

    CVE-2026-120734

    Cleartext Transmission of Stored SMTP Password via Email Test in Devolutions Server

    Last Modified: Nov 03, 2026
    Published: Nov 03, 2026

    CVE-2026-120715

    Server‑side request forgery enabling capture of DVLS service account hash

    Last Modified: Nov 03, 2026
    Published: Nov 03, 2026

    CVE-2026-120733

    Cleartext Storage of TOTP Shared Secrets in Devolutions Server

    Last Modified: Nov 04, 2026
    Published: Nov 03, 2026
    Items Per Page
    Devolutions Vulnerabilities & Security CVEs | CVE-DB