CVE-2021-36382: Devolutions Server

Low severity, CVSS 3.7. EPSS: 0.7% chance of exploitation in the next 30 days.

Devolutions Server before 2021.1.18, and LTS before 2020.3.20, allows attackers to intercept private keys via a man-in-the-middle attack against the connections/partial endpoint (which accepts cleartext).

Affected products

• Devolutions Devolutions Server: before 2020.3.20 (fixed in 2020.3.20); before 2021.1.18 (fixed in 2021.1.18)

Published 2021-07-12. Last modified 2026-06-17.