PT-2026-21978 · Devolutions · Devolutions Server

Jagotu · Publicado 2026-02-25 · Atualizado 2026-02-26 · CVE-2026-3221

Positive Technologies (AI Summary)

CVSS v3.1

4.9

Média

Vetor base

AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N

Name of the Vulnerable Software and Affected Versions Devolutions Server versions 2025.3.14 and earlier

Description Sensitive user account information is not encrypted in the database. An attacker gaining access to the database can obtain this sensitive information through direct database access.

Recommendations Update to a version of Devolutions Server later than 2025.3.14.

Correção

Cleartext Storage of Sensitive Information

Enumeração de Fraquezas

CWE-312

Identificadores relacionados

CVE-2026-3221

Produtos afetados

Devolutions Server

Referências · 5

• https://t.me/CVEtracker/45755 · Publicação no Telegram
• https://devolutions.net/security/advisories/DEVO-2026-0004 · Aviso do Fabricante
• https://osv.dev/vulnerability/CVE-2026-3221 · Aviso do Fabricante
• https://twitter.com/CVEnew/status/2027099303949578682 · Publicação no Twitter
• https://nvd.nist.gov/vuln/detail/CVE-2026-3221 · Nota de Segurança