Vulnerability Database

315,294

Total vulnerabilities in the database

CVE-2025-6741

Improper access control in secure message component in Devolutions Server allows an authenticated user to steal unauthorized entries via the secure message entry attachment feature

This issue affects the following versions :

  • Devolutions Server 2025.2.2.0 through 2025.2.4.0

Devolutions Server 2025.1.11.0 and earlier

  • Published: Jul 22, 2025
  • Updated: Nov 16, 2025
  • CVE: CVE-2025-6741
  • Severity: High
  • Exploit:

CVSS v3:

  • Severity: High
  • Score: 7.7
  • AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:N/A:N

CWEs:

OWASP TOP 10:

Software From Fixed in
devolutions / devolutions_server - 2025.1.11.0.x
devolutions / devolutions_server 2025.2.2.0 2025.2.5.0