Vulnerability Database

309,364

Total vulnerabilities in the database

CVE-2025-3768

Improper access control in Tor network blocking feature in Devolutions Server 2025.1.10.0 and earlier allows an authenticated user to bypass the tor blocking feature when the Devolutions hosted endpoint is not reachable.

  • Published: Jun 5, 2025
  • Updated: Nov 16, 2025
  • CVE: CVE-2025-3768
  • Severity: Medium
  • Exploit:

CVSS v3:

  • Severity: Medium
  • Score: 5
  • AV:N/AC:H/PR:L/UI:N/S:U/C:L/I:L/A:L

CWEs:

OWASP TOP 10:

Software From Fixed in
devolutions / devolutions_server - 2025.1.10.0.x