CVEs published by Devolutions Inc.

CVEs published by Devolutions Inc. (CVE Numbering Authority). 7 tracked.

CVE-2026-110804 MEDIUM 4.3 UPGRADE Improperly controlled modification of JIT elevation settings in PAM checkout in Devolutions Server 2026.3.8.0
CVE-2026-110805 LOW 2.6 UPGRADE Server-side request forgery in PingOne groups endpoint in Devolutions Server 2026.3.8.0 and earlier allows an
CVE-2026-110806 MEDIUM 6.5 UPGRADE Incorrect authorization in add-on properties in Devolutions Server 2026.3.8.0 and earlier allows an authentica
CVE-2026-110287 MEDIUM 4.3 UPGRADE Improper access control in asset contact password in Devolutions Server 2026.3.8.0 and earlier allows an authe
CVE-2026-114485 HIGH n/a Insufficient protection of sensitive information in the user list endpoint in Devolutions Server 2026.3.10.0
CVE-2026-114486 HIGH n/a Incorrect authorization in the Devolutions Gateway token generation in Devolutions Server 2026.3.10.0 and ear
CVE-2026-114487 HIGH n/a Missing authorization in the PAM AD computer import endpoint in Devolutions Server 2026.3.5.0 through 2026.3.1