CVE-2026-1768: Devolutions Server

Medium severity, CVSS 4.3. EPSS: 0.2% chance of exploitation in the next 30 days.

A permission cache poisoning vulnerability in Devolutions Server allows authenticated users to bypass permissions to access entries.This issue affects Devolutions Server: before 2025.3.15.

Affected products

• Devolutions Devolutions Server: before 2025.3.15.0 (fixed in 2025.3.15.0)

Published 2026-02-24. Last modified 2026-06-17.