Signal is active with 2 mentions in latest observed window
Recommended action window: Monitor and triage in normal cycle
NVD description
Improper access control in multiple DVLS REST API endpoints in Devolutions Server 2025.3.14.0 and earlier allows an authenticated user with view-only permission to access sensitive connection data.
Priority
LOW
Exploitation
NONE
PoC
NONE
Patch
NONE
Momentum
NONE
If you run products in this scope, you should treat this CVE as relevant to your environment.
CVE-2026-3131 Improper access control in multiple DVLS REST API endpoints in Devolutions Server 2025.3.14.0 and earlier allows an authenticated user with view-only permission to ac… https://www.cve.org/CVERecord?id=CVE-2026-3131
Post summary
The text announces CVE‑2026‑3131, describing an improper access control flaw in Devolutions Server’s REST API that allows view‑only users to access restricted data.
CVE-2026-3131 Authenticated Sensitive Data Disclosure in Devolutions Ser... https://vulmon.com/vulnerabilitydetails?qid=CVE-2026-3131 Don't wait vulnerability scanning results: https://alerts.vulmon.com/?utm_source=twitter&utm_medium=social&utm_campaign=2102281&utm_content=2
Post summary
The post announces CVE-2026-3131, an authenticated sensitive data disclosure vulnerability in Devolutions Server, with links to vulnerability details and alerts, but provides no PoC, exploit, patch, or active exploitation information.
1 of 1 entries
| Part | Vendor | Product | Version | Target SW | Target HW |
|---|---|---|---|---|---|
| App | devolutions | devolutions_server | - | - | - |