| Package | Affected versions | Patched versions |
|---|---|---|
| devolutions server | ≥ 2026.1.1.0, < 2026.1.12.0< 2025.3.18.0 | 2026.1.12.02025.3.18.0 |
Improper authentication in the OAuth login functionality in Devolutions Server 2026.1.11 and earlier allows a remote attacker with valid credentials to bypass multi-factor authentication via a crafted login request.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free