← Database

CVE-2026-3131

MEDIUM CVSS: 6.5 Published: 2026-02-24 Modified: 2026-06-17

Description

Improper access control in multiple DVLS REST API endpoints in Devolutions Server 2025.3.14.0 and earlier allows an authenticated user with view-only permission to access sensitive connection data.

Affected Platforms

Devolutions Devolutions Server

Weakness Type

CWE-200, NVD-CWE-noinfo

References