CVE records

Every CVE as the CVE Program publishes it, refreshed every ten minutes, with NVD's analysis, CISA's known-exploited status and a healthcare tag. Subscribers get the CVEs that match their own systems on My program, by email as they are published. Where the data comes from: sources.

Updated under an hour ago ()

What this means for you

This week: 3,191 CVEs published, 235 critical, and 5 newly confirmed exploited. Add your stack to see whether any of them hit you.

Published in the last 7 days
3,191
Show in the list
Critical, last 7 days
235
Show in the list
Healthcare-tagged, last 7 days
9
Show in the list
Known exploited (CISA KEV)
1,762
Show in the list

Showing CVEs that name the product devolutions:remote_desktop_manager. Show all products

7 CVEs
Showing 1 to 7.
CVESeverityTitlePublished
CVE-2025-13683Medium 6.5Exposure of credentials in unintended requests in Devolutions Server, Remote Desktop Manager on Windows.This issue affects Devolutions Server: through 2025.3.8.0; Remote Desktop Manager: through 2025…
Assigned by DEVOLUTIONS
Nov 28, 2025
CVE-2026-0747Low 3.3Exposure of sensitive information in the TeamViewer entry dashboard component in Devolutions Remote Desktop Manager 2025.3.24.0 through 2025.3.28.0 on Windows allows an external observer to view a pa…
Assigned by DEVOLUTIONS
Jan 8, 2026
CVE-2026-2590Critical 9.8Improper enforcement of the Disable password saving in vaults setting in the connection entry component in Devolutions Remote Desktop Manager 2025.3.30 and earlier allows an authenticated user to per…
Assigned by DEVOLUTIONS
Mar 3, 2026
CVE-2026-12161High 8.8Improper input validation in the SSH Elevate Shell feature allows an authenticated user with permission to create or modify a shared SSH entry to execute arbitrary commands on a remote SSH host using…
Assigned by DEVOLUTIONS
Jun 15, 2026
CVE-2026-12162Medium 5.5Improper host validation in the social login autofill feature in Devolutions Remote Desktop Manager 2026.2.8 allows an attacker to disclose stored social login credentials via a crafted web entry poi…
Assigned by DEVOLUTIONS
Jun 15, 2026
CVE-2026-13372High 7.2Incorrect link resolution by display name in the custom PowerShell VPN editor in Devolutions Remote Desktop Manager 2026.2.5 through 2026.2.11 allows an authenticated attacker with write access to a…
Assigned by DEVOLUTIONS
Jun 26, 2026
CVE-2026-78417Medium 4.3Insufficient verification of data authenticity in the IronVNC client in Devolutions Remote Desktop Manager 2026.2.17.0 and earlier, 2026.1.24.0 and earlier, allows an on-path attacker to intercept an…
Assigned by DEVOLUTIONS
Aug 24, 2026

CVSS is the assigning CNA's score where it gives one, otherwise NVD's. The healthcare tag is a documented heuristic (a list of clinical and health IT vendors, and clinical terms in the description), not a classification. The CVE record is authoritative.

Your cookie choices
We use essential cookies to run this site, and, only with your consent, an advertising cookie from Google to measure whether our ads lead to sign-ups and subscriptions. See our for details.