Exploited: 179
LatestCVE-2026-86005 — Chartbrew: Unauthenticated BullMQ Admin Dashboard Exposure in Chartbrew
VulnFeed.org
AREN

Devolutions Server vulnerabilities and fixes

Exploited and high-severity Devolutions Server vulnerabilities tracked by VulnFeed, with CVSS and EPSS scores, affected versions and fixes.

RSS for this product
  1. 8.1CVE-2026-120715Server-side request forgery in the Active Directory credential validation in Devolutions Server 2026.3.12.0 and earlier allows an authenticated low-prFix availableDevolutions Server
    1 min read
  2. 7.5CVE-2026-120733Cleartext storage of sensitive information in the user account data in Devolutions Server 2026.3.12.0 and earlier allows an attacker with read access Fix availableDevolutions Server
    1 min read
  3. 8.8CVE-2026-119636Improper release of expired privileged access checkouts in the PAM scheduled check-in task in Devolutions Server 2025.3.2.0 through 2026.2.22.0 allowsFix availableDevolutions Server
    1 min read
  4. 8.1CVE-2026-121580Server-side request forgery in the Jira ticketing filter lookup in Devolutions Server 2026.2.22.0 and earlier allows an authenticated low-privileged uFix availableDevolutions Server
    1 min read
Esc