Loading vulnerability details…
CVSS v3.1
4.9
EPSS
0.15%
Published
Feb 25, 2026
Modified
Feb 27, 2026
Public PoC / Exploit (1)
All weaponized →Links to public security research (Exploit-DB, Nuclei, Trickest, GitHub) for defensive use only.
Description
Sensitive user account information is not encrypted in the database in Devolutions Server 2025.3.14 and earlier, which allows an attacker with access to the database to obtain sensitive user information via direct database access.
CVSS Vector
CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:NWeaknesses (CWE)
Affected Products (1)
References (1)