4 CVEs
CRITICAL
CVSS 9.8
Devolutions Remote Management Vulnerabilities
2026-03-03
CVE-2026-3130
CRITICAL
Behavioral control bypass in Devolutions Server 2025.3.15 allows authenticated users to exploit delete permissions.
9.8
CVSS
0.0%
EPSS
CVE-2026-3224
CRITICAL
Azure AD auth bypass in Devolutions Server 2025.3.15.0 and earlier.
9.8
CVSS
0.1%
EPSS
CVE-2026-2590
CRITICAL
Insecure password saving enforcement in Devolutions Remote Desktop Manager 2025.3.
9.8
CVSS
0.1%
EPSS
CVE-2026-3204
CRITICAL
Input validation flaw in Devolutions Server error message page enables remote spoofing attacks.
9.8
CVSS
0.1%
EPSS