CVE-2021-42098: Devolutions Remote Desktop Manager

High severity, CVSS 8.8. EPSS: 1.8% chance of exploitation in the next 30 days.

An incomplete permission check on entries in Devolutions Remote Desktop Manager before 2021.2.16 allows attackers to bypass permissions via batch custom PowerShell.

Affected products

• Devolutions Remote Desktop Manager: before 2021.2.16 (fixed in 2021.2.16)

Published 2021-10-18. Last modified 2026-06-17.