Vulnerability Database

315,294

Total vulnerabilities in the database

CVE-2025-6523

Use of weak credentials in emergency authentication component in Devolutions Server allows an unauthenticated attacker to bypass authentication via brute forcing the short emergency codes generated by the server within a feasible timeframe.

This issue affects the following versions :

  • Devolutions Server 2025.2.2.0 through 2025.2.3.0

Devolutions Server 2025.1.11.0 and earlier

  • Published: Jul 22, 2025
  • Updated: Nov 16, 2025
  • CVE: CVE-2025-6523
  • Severity: High
  • Exploit:

CVSS v3:

  • Severity: High
  • Score: 7.7
  • AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:N/A:N

CWEs:

Software From Fixed in
devolutions / devolutions_server - 2025.1.11.0.x
devolutions / devolutions_server 2025.2.2.0 2025.2.4.0