Information Disclosure

Every one of the 27 is a mark on the map. Named now: 1 to 26, most at risk first.

1. Exposure of sensitive information in My Personal Credentials password history component in Devolutions Remote Desktop Manager 2024.3.29 and earlier on Windows allows an authentica…CVE-2025-1636Devolutions · CVSS 6.5 · 1.8% likely

   CWE-200

2. Exposure of sensitive information in hub data source export feature in Devolutions Remote Desktop Manager 2024.3.29 and earlier on Windows allows a user exporting a hub data sourc…CVE-2025-1635Devolutions · CVSS 6.5 · 1.8% likely

   CWE-200

3. Information Exposure vulnerability in My Account Settings of Devolutions Remote Desktop Manager before 2022.1.8 allows authenticated users to access credentials of other users. Th…CVE-2022-2221Devolutions · 1.3% likely

   CWE-200

4. Improper removal of sensitive data in the entry edit feature of Hub Business submodule in Devolutions Remote Desktop Manager PowerShell Module 2022.3.1.5 and earlier allows an aut…CVE-2023-1203Devolutions · 1.1% likely

   CWE-200

5. An issue was discovered in Devolutions Server before 2020.3. There is an exposure of sensitive information in diagnostic files.CVE-2021-23924Devolutions · 1.0% likely

   CWE-532

6. Exposure of private personal information to an unauthorized actor in the user vaults component of Devolutions Remote Desktop Manager allows an authenticated user to gain unauthori…CVE-2025-5334Devolutions · CVSS 7.5 · 0.6% likely

   CWE-359

7. Exposure of password in web-based SSH authentication component in Devolutions Server 2024.3.13 and earlier allows a user to unadvertently leak his SSH password due to missing pass…CVE-2025-2277Devolutions · CVSS 7.5 · 0.6% likely

   CWE-200

8. Improper access control in the Password History feature in Devolutions DVLS 2024.3.6 and earlier allows a malicious authenticated user to obtain sensitive data via faulty permissi…CVE-2024-10971Devolutions · CVSS 4.3 · 0.5% likely

   CWE-200

9. Information leak in Content-Security-Policy header in Devolutions Server 2023.3.7.0 allows an unauthenticated attacker to list the configured Devolutions Gateways endpoints.CVE-2023-6264Devolutions · 0.5% likely

   CWE-200

10. Improper removal of sensitive information in data source export feature in Devolutions Remote Desktop Manager 2024.1.32.0 and earlier on Windows allows an attacker that obtains th…CVE-2024-6055Devolutions · CVSS 4.7 · 0.5% likely

    CWE-212

11. Insertion of sensitive information into sent data in the AI Agent job API in Devolutions PowerShell Universal 2026.2.0 allows an authenticated user with AI Agent read access to ob…CVE-2026-13437Devolutions · CVSS 6.5 · 0.4% likely

    CWE-201

12. Exposure of credentials in unintended requests in Devolutions Server, Remote Desktop Manager on Windows.This issue affects Devolutions Server: through 2025.3.8.0; Remote Desktop M…CVE-2025-13683Devolutions · CVSS 6.5 · 0.4% likely

    CWE-200

13. Exposure of email service credentials to users without administrative rights in Devolutions Server.This issue affects Devolutions Server: before 2025.2.21, before 2025.3.9.CVE-2025-13765Devolutions · CVSS 4.3 · 0.4% likely

    CWE-200

14. Insertion of sensitive information into sent data in the automation jobs API in Devolutions PowerShell Universal 2026.2.2 and earlier allows an authenticated user with scoped job…CVE-2026-16798Devolutions · CVSS 6.5 · 0.4% likely

    CWE-201

15. Insertion of sensitive information into log file in the slow query logging feature in Devolutions PowerShell Universal 2026.2.5 and earlier allows an authenticated user with log r…CVE-2026-92237Devolutions · CVSS 6.5 · 0.4% likely

    CWE-532

16. Improper access control in multiple DVLS REST API endpoints in Devolutions Server 2025.3.14.0 and earlier allows an authenticated user with view-only permission to access sensitiv…CVE-2026-3131Devolutions · CVSS 6.5 · 0.3% likely

    CWE-200

17. Exposure of credentials in unintended requests in Devolutions Server.This issue affects Server: through 2025.2.20, through 2025.3.8.CVE-2025-13758Devolutions · CVSS 3.5 · 0.3% likely

    CWE-200

18. Insertion of sensitive information into sent data in the identity provider user synchronization in Devolutions Server 2026.3.13.0 and earlier allows an authenticated user with the…CVE-2026-120716Devolutions · CVSS 6.5 · 0.3% likely

    CWE-201

19. Improper access control in the social login connection endpoint in Devolutions Server 2026.2.5 allows an authenticated vault member to enumerate social login entry metadata to whi…CVE-2026-12117Devolutions · CVSS 4.3 · 0.3% likely

    CWE-200

20. Insufficient protection of sensitive information in the user list endpoint in Devolutions Server 2026.3.10.0 and earlier allows an authenticated attacker with delegated user view…CVE-2026-114485Devolutions · CVSS 4.3 · 0.2% likely

    CWE-201

21. Exposure of sensitive information in the users MFA feature in Devolutions Server allows users with user management privileges to obtain other users OTP keys via an authenticated A…CVE-2026-4927Devolutions · CVSS 6.5 · 0.2% likely

    CWE-201

22. Missing authorization in the data source settings API in Devolutions Server 2026.3.5.0 and earlier allows an authenticated non-administrative user to disclose integration secrets…CVE-2026-100286Devolutions · CVSS 6.5 · 0.2% likely

    CWE-200

23. Exposure of sensitive information in the TeamViewer entry dashboard component in Devolutions Remote Desktop Manager 2025.3.24.0 through 2025.3.28.0 on Windows allows an external o…CVE-2026-0747Devolutions · CVSS 3.3 · 0.2% likely

    CWE-200

24. Insertion of sensitive information into sent data in the user list endpoint in Devolutions Server 2026.3.13.0 and earlier allows an authenticated user with delegated user-viewing…CVE-2026-126331Devolutions · 0.2% likely

    CWE-201

25. Improper access control in the connection history in Devolutions Server 2026.3.13.0 allows an authenticated user without the permission to view passwords to obtain historical entr…CVE-2026-126327Devolutions · 0.2% likely

    CWE-200

26. Insertion of sensitive information into a file in the Recovery Kit response file generation feature in Devolutions Server 2026.1.22.0, 2026.2.11.0 allows an attacker with access t…CVE-2026-15642Devolutions · CVSS 3.3 · 0.2% likely

    CWE-200

exploited in the wildcheck availableringed, named or not: CyberSIXT has reported on it

Zoom in on the map and the dots under the middle of it are named where they are.