ByteOS Network

CVE Vulnerability Details :

CVE-2026-3131

PUBLISHED

More Info Official Page

Assigner-DEVOLUTIONS

Assigner Org ID-bfee16bd-18e6-446c-9a65-f5b2e3d89c23

Published At-24 Feb, 2026 | 19:01

Updated At-24 Feb, 2026 | 19:01

▼CVE Numbering Authority (CNA)

Improper access control in multiple DVLS REST API endpoints in Devolutions Server 2025.3.14.0 and earlier allows an authenticated user with view-only permission to access sensitive connection data.

Affected Products

Vendor

Devolutions

Product

Server

Default Status

unaffected

Versions

Affected

From 0 before 2025.3.15 (custom)

Problem Types

Type	CWE ID	Description
CWE	CWE-200	CWE-200 Exposure of Sensitive Information to an Unauthorized Actor

Type: CWE

CWE ID: CWE-200

Description: CWE-200 Exposure of Sensitive Information to an Unauthorized Actor

References

Hyperlink	Resource
https://devolutions.net/security/advisories/DEVO-2026-0004/	N/A

Hyperlink: https://devolutions.net/security/advisories/DEVO-2026-0004/

Resource: N/A

Affected Products

Affected

Problem Types

Metrics

Metrics Other Info

Impacts

Solutions

Configurations

Workarounds

Exploits

Credits

Timeline

Replaced By

Rejected Reason

References