Devolutions
Number 96 by total vulnerabilities in the catalog.
Computed from the whole catalog when the site is built.
Total vulnerabilities
199
Critical
8
High
54
Known Exploited
0
Exploit available
0
Network, no login needed
17.6%
Of 182 scored records
- Critical
- High
- Medium
- Low
- None or not scored
Show as table
| Period | Total | Critical | High | Medium | Low | None or not scored |
|---|---|---|---|---|---|---|
| 2026 (incomplete) | 98 | 5 | 27 | 57 | 9 | 0 |
| 2025 | 34 | 0 | 14 | 18 | 2 | 0 |
| 2024 | 28 | 2 | 5 | 19 | 2 | 0 |
| 2023 | 30 | 1 | 5 | 10 | 2 | 12 |
| 2022 | 8 | 0 | 3 | 1 | 0 | 4 |
| 2021 | 1 | 0 | 0 | 0 | 0 | 1 |
Top products
| Product | Total | Critical/High |
|---|---|---|
| Server | 112 | 34 |
| Remote Desktop Manager | 47 | 16 |
| Devolutions Server | 16 | 3 |
| PowerShell Universal | 14 | 5 |
| Workspace | 2 | 0 |
| DVLS (Devolutions Server) | 1 | 0 |
| Gateway | 1 | 1 |
| Hub Reporting Service | 1 | 1 |
| Password Manager | 1 | 1 |
| Remote Desktop Manager PowerShell Module | 1 | 0 |
Top bug types
| Bug type | Total | Critical/High |
|---|---|---|
| Improper Access Control | 21 | 4 |
| Incorrect Authorization | 20 | 5 |
| Missing Authorization | 18 | 2 |
| Information Disclosure | 17 | 2 |
| Authentication Issues | 12 | 5 |
| Improper certificate validation | 5 | 4 |
| Insecure Direct Object Reference | 5 | 2 |
| Server-Side Request Forgery | 5 | 3 |
| Cleartext Storage of Sensitive Information | 4 | 2 |
| Improper Certificate Validation | 4 | 4 |
Newest vulnerabilities
| CVE | Title | Published | Severity | EPSS |
|---|---|---|---|---|
| CVE-2026-121580 | Devolutions Server: Server-Side Request Forgery | High | 0.3% | |
| CVE-2026-120734 | Devolutions Server vulnerability | Medium | 0.2% | |
| CVE-2026-120733 | Devolutions Server vulnerability | High | 0.2% | |
| CVE-2026-120716 | Devolutions Server vulnerability | Medium | 0.3% | |
| CVE-2026-120715 | Devolutions Server: Server-Side Request Forgery | High | 0.2% | |
| CVE-2026-119636 | Devolutions Server vulnerability | High | 0.4% | |
| CVE-2026-116627 | Devolutions PowerShell Universal: Cross-Site Scripting | High | 0.2% | |
| CVE-2026-114487 | Devolutions Server: Missing Authorization | Medium | 0.2% | |
| CVE-2026-114486 | Devolutions Server: Incorrect Authorization | Medium | 0.2% | |
| CVE-2026-114485 | Devolutions Server vulnerability | Medium | 0.2% |