PT-2025-43381 · Devolutions +1 · Devolutions Server +1

Published 2025-10-22 · Updated 2025-10-23 · CVE-2025-11958

Positive Technologies · (AI Summary)

CVSS v3.1

4.1

4.1

Medium

Base vector

AV:N/AC:L/PR:H/UI:N/S:C/C:N/I:N/A:L

Name of the Vulnerable Software and Affected Versions Devolutions Server versions 2025.2.15.0 and earlier

Description An improper input validation exists in the Security Dashboard's ignored-tasks API. An authenticated user can send a crafted request to cause a denial of service to the Security Dashboard. The issue is related to the HTTP Web Server component.

Recommendations Versions prior to 2025.2.15.0 should be updated.

Fix

DoS

RCE

Weakness Enumeration

CWE-20

Related Identifiers

CVE-2025-11958

Affected Products

Devolutions Server

Httpdx Web Server

References · 4

• https://nvd.nist.gov/vuln/detail/CVE-2025-11958 · Security Note
• https://devolutions.net/security/advisories/DEVO-2025-0015 · Note
• https://twitter.com/VulmonFeeds/status/1981200199969087969 · Twitter Post
• https://twitter.com/transilienceai/status/1981201883038462210 · Twitter Post