Other weaknesses

Every one of the 4 is a mark on the map. Named now: 1 to 4, most at risk first.

1. Insufficient logging in the autotyping feature in Devolutions Remote Desktop Manager on Windows allows an authenticated user to use a stored password without generating a correspo…CVE-2025-2562Devolutions · CVSS 5.4 · 0.4% likely

   CWE-778

2. Improper access control in PAM account discovery results in Devolutions Server 2026.2.5, 2026.1.21 allows an authenticated user to retrieve account discovery scan results.CVE-2026-11890Devolutions · CVSS 4.3 · 0.2% likely

   CWE-882

3. Insufficient logging in the entry export feature in Devolutions Server allows an authenticated user with export permissions to export a sealed entry without triggering the unseal…CVE-2026-9247Devolutions · CVSS 2.4 · 0.2% likely

   CWE-778

4. Non constant time cryptographic operation in Devolutions.XTS.NET 2024.11.19 and earlier allows an attacker to render half of the encryption key obsolete via a timing attacksCVE-2024-11862Devolutions · CVSS 5.1 · 0.1% likely

   CWE-385

exploited in the wildcheck availableringed, named or not: CyberSIXT has reported on it

Zoom in on the map and the dots under the middle of it are named where they are.