Access Control Flaw in Devolutions Server by Devolutions
CVE-2026-126327

Currently unrated

Key Information:

Vendor: Devolutions
Status: Server
Vendor: CVE Published:; 11 November 2026

🔔 Create Devolutions Vulnerability Alert

What is CVE-2026-126327?

In Devolutions Server version 2026.3.13.0, a security flaw has been identified that allows authenticated users without adequate permissions to improperly access historical entry passwords via the connection history API. This vulnerability could lead to unauthorized disclosure of sensitive information, underscoring the importance of implementing strict access controls.

Affected Version(s)

Server 0 < 2026.3.14

References

https://devolutions.net/security/advisories/DEVO-2026-0041/

Download the Critical Vulnerability Management Cheat Sheet

Timeline

Vulnerability published
Nov 11, 2026
Vulnerability Reserved
Nov 10, 2026

CVE-2026-126327 Data

JSON