CVE-2026-3131

Publication date

2026-02-24 19:01:29

Family

DEVOLUTIONS

State

PUBLISHED

Description

Improper access control in multiple DVLS REST API endpoints in Devolutions Server 2025.3.14.0 and earlier allows an authenticated user with view-only permission to access sensitive connection data.