| Package | Affected versions | Patched versions |
|---|---|---|
| devolutions server | ≥ 2026.1.1.0, < 2026.1.12.0< 2025.3.18.0 | 2026.1.12.02025.3.18.0 |
Improper authentication in the two-factor authentication (2FA) feature in Devolutions Server 2026.1.11 and earlier allows a remote attacker with valid credentials to bypass multifactor authentication and gain unauthorized access to the victim account via reuse of a partially authenticated session token.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free