Search Results (2 CVEs found)

CVE Vendors Products Updated CVSS v3.1
CVE-2026-3221 1 Devolutions 2 Devolutions Server, Server 2026-02-28 4.9 Medium
Sensitive user account information is not encrypted in the database in Devolutions Server 2025.3.14 and earlier, which allows an attacker with access to the database to obtain sensitive user information via direct database access.
CVE-2026-3131 1 Devolutions 2 Devolutions Server, Server 2026-02-26 6.5 Medium
Improper access control in multiple DVLS REST API endpoints in Devolutions Server 2025.3.14.0 and earlier allows an authenticated user with view-only permission to access sensitive connection data.