Devolutions Server

Name: Devolutions Server
Brand: Devolutions

productEU

A product tracked in the threat graph; the vulnerabilities below are known to affect it.

KEV-listed

public exploit

EPSS ≥ 10%

critical

by severity

0critical3high7medium2low

updated 2026-10-28

vulnerabilities (109)

Related CVEs.

sort

ID	severity	EPSS	exploitable	patched	published	affected
CVE-2024-2921US	—OT elevated	0.79% (56th)	—	no fix	2024-03-26	2 versions
CVE-2023-5575US	medium6.5	0.77% (55th)	—	no fix	2023-10-16	≤ 0 ≤ 2022.3.13.0
CVE-2023-5240US	high7.5	0.75% (55th)	—	no fix	2023-10-13	≤ 0 ≤2023.2.8.0
CVE-2024-5072US	—	0.68% (52nd)	—	no fix	2024-05-17	≤ 0 ≤2024.1.11.0
CVE-2024-2915US	—OT elevated	0.65% (51st)	—	no fix	2024-03-26	≤ 0 ≤2024.1.6
CVE-2023-1603US	medium6.5OT elevated	0.62% (49th)	—	no fix	2023-04-02	≤ 0 ≤2022.3.13
CVE-2025-12485US	—	0.60% (48th)	—	2025.3.6.0	2025-11-06	3 versions
CVE-2025-13757US	high8.8	0.59% (48th)	—	2025.3.9	2025-11-27	4 versions
CVE-2025-4433US	—	0.57% (47th)	—	no fix	2025-05-30	≤ 0 ≤2025.1.7.0
CVE-2026-3204US	—	0.57% (47th)	—	2026.1	2026-03-03	3 versions
CVE-2025-2277US	—	0.56% (46th)	—	no fix	2025-03-13	≤ 0 ≤2024.3.13.0
CVE-2026-3224US	—	0.53% (44th)	—	2025.3.16	2026-03-03	2 versions
CVE-2023-6264US	medium5.3	0.52% (44th)	—	no fix	2023-11-22	≤ 0 ≤2023.3.7
CVE-2025-2280US	—	0.51% (43rd)	—	no fix	2025-03-13	≤ 0 ≤2024.3.4.0
CVE-2025-6523US	—	0.48% (41st)	—	2025.2.5.0	2025-07-22	4 versions
CVE-2026-3130US	—	0.46% (40th)	—	2025.3.16	2026-03-03	3 versions
CVE-2024-12196US	—OT elevated	0.46% (40th)	—	no fix	2024-12-04	≤ 0 ≤2024.3.7.0
CVE-2025-2278US	—	0.46% (39th)	—	no fix	2025-03-13	≤ 0 ≤2024.3.13
CVE-2025-11958US	—	0.45% (39th)	—	2025.2.14.0	2025-10-22	2 versions
CVE-2023-2400US	low2.7	0.44% (38th)	—	no fix	2023-06-20	≤ 0 ≤2023.1.8
CVE-2025-2003US	—OT elevated	0.44% (38th)	—	no fix	2025-03-05	≤ 0 ≤2024.3.12.0
CVE-2025-6741US	—	0.44% (38th)	—	2025.2.4.0	2025-07-22	4 versions
CVE-2025-8353US	—	0.43% (38th)	—	2025.2.5.0	2025-07-30	2 versions
CVE-2025-12808US	—	0.43% (37th)	—	2025.3.6.0	2025-11-06	3 versions
CVE-2026-14536US	high8.8OT elevated	0.43% (37th)	—	2026.2.11.0	2026-07-06	2 versions
CVE-2026-17568US	—OT elevated	0.42% (36th)	—	2026.2.14.0	2026-07-27	4 versions
CVE-2026-105485US	—OT elevated	0.40% (34th)	—	2026.2.19.0	2026-10-06	2 versions
CVE-2025-5382US	—	0.40% (34th)	—	2025.1.9.0	2025-06-05	2 versions
CVE-2025-13683US	—	0.39% (33rd)	—	2025.3.25.0	2025-11-28	2 versions
CVE-2024-4846US	—	0.39% (32nd)	—	no fix	2024-06-25	≤ 0 ≤2024.1.14.0
CVE-2025-4493US	—	0.38% (32nd)	—	no fix	2025-05-28	2 versions
CVE-2025-4316US	—	0.37% (31st)	—	no fix	2025-05-05	3 versions
CVE-2024-12148US	—OT elevated	0.37% (30th)	—	no fix	2024-12-04	≤ 0 ≤2024.3.6.0
CVE-2025-13765US	medium4.3	0.36% (30th)	—	2025.2.21	2025-11-27	4 versions
CVE-2026-12755US	—	0.36% (30th)	—	2026.2.9.0	2026-06-25	2 versions
CVE-2024-1764US	—	0.36% (30th)	—	no fix	2024-03-05	2 versions
CVE-2025-8312US	—	0.35% (28th)	—	2025.2.7.0	2025-07-30	5 versions
CVE-2025-1231US	—	0.35% (28th)	—	no fix	2025-02-11	≤ 0 ≤2024.3.10.0
CVE-2026-90969US	—	0.35% (28th)	—	2026.2.17	2026-09-15	2 versions
CVE-2026-3131US	medium6.5	0.34% (28th)	—	2025.3.15	2026-02-24	2 versions
CVE-2026-90971US	—OT elevated	0.34% (27th)	—	2026.3.5.0	2026-09-15	2 versions
CVE-2024-1901US	—	0.34% (27th)	—	no fix	2024-03-05	2 versions
CVE-2025-11957US	—	0.33% (26th)	—	2025.3.2.0	2025-10-22	2 versions
CVE-2026-4924US	—	0.33% (26th)	—	2026.1.12.0	2026-04-01	3 versions
CVE-2025-0691US	—	0.32% (25th)	—	2025.2.2.0	2025-06-05	2 versions
CVE-2026-9047US	—	0.32% (25th)	—	2025.3.22.0	2026-05-22	3 versions
CVE-2026-0610US	—	0.31% (24th)	—	2025.3.14	2026-01-19	2 versions
CVE-2026-12105US	—OT elevated	0.30% (22nd)	—	2026.2.7	2026-06-16	2 versions
CVE-2025-13758US	low3.5	0.30% (22nd)	—	2025.2.21	2025-11-27	4 versions
CVE-2026-15641US	—OT elevated	0.29% (22nd)	—	2026.1.23.0	2026-07-14	4 versions

showing 50 of 109

weaknesses (8)

The flaw types (CWEs) most of these CVEs share.

CWE-284Improper Access Control17 CVEs
CWE-862Missing Authorization15 CVEs
CWE-863Incorrect Authorization13 CVEs
CWE-200Exposure of Sensitive Information to an Unauthorized Actor9 CVEs
CWE-639Authorization Bypass Through User-Controlled Key5 CVEs
CWE-20Improper Input Validation4 CVEs
CWE-295Improper Certificate Validation4 CVEs
CWE-287Improper Authentication3 CVEs

sources (2)

Which sources assert this record, and when.

EUEU Vulnerability Database (ENISA)86 CVEs
DECERT-Bund (BSI CSAF)82 CVEs

scry

Products carry known vulnerabilities once they are exposed to the internet. See what is exposed on your perimeter with a free passive scan.

Free scan