Security & compliance
Upholding the highest standards to protect your data and ensure trust.
DEVO-2026-0003
Devolutions Server is affected by multiple vulnerabilities.
Affected Products
Change Log
15/01/2026 - Initial publication
7.0 High - CVSS:4.0/AV:N/AC:L/AT:N/PR:H/UI:N/VC:L/VI:H/VA:N/SC:N/SI:N/SA:N
SQL injection in remote-sessions
An SQL injection in remote-sessions allows users with privilege session monitoring permissions to extract or modify data.
Affected Products
CVE(s)
CVE-2026-0610
Remediation and Workarounds
Upgrade to version 2025.3.14 or later
High - CVSS:4.0/AV:N/AC:L/AT:N/PR:H/UI:N/VC:L/VI:H/VA:N/SC:N/SI:N/SA:N
Virtual gateway deny IP rule bypass
Virtual gateway deny IP rules can be bypassed under specific conditions when using a linked host.
Affected Products
CVE(s)
CVE-2026-1007
Remediation and Workarounds
Upgrade to version 2025.3.14 or later