CVE-2025-11958: Devolutions Server

Medium severity, CVSS 4.1. EPSS: 0.4% chance of exploitation in the next 30 days.

An improper input validation in the Security Dashboard ignored-tasks API of Devolutions Server 2025.2.15.0 and earlier allows an authenticated user to cause a denial of service to the Security Dashboard via a crafted request.

Affected products

• Devolutions Devolutions Server: up to and including 2025.2.15.0

Published 2025-10-22. Last modified 2026-10-08.