← Database

CVE-2026-3204

CRITICAL CVSS: 9.8 Published: 2026-03-03 Modified: 2026-06-17

Description

Improper input validation in the error message page in Devolutions Server 2025.3.16 and earlier allows remote attackers to spoof the displayed error message via a specially crafted URL.

Affected Platforms

Devolutions Devolutions Server

Weakness Type

CWE-20

References