# Devolutions Devolutions Server


- [CVE-2026-3130](https://insights.sbomify.com/CVE-2026-3130/): Business logic in Server (critical 9.8)
- [CVE-2026-3204](https://insights.sbomify.com/CVE-2026-3204/): Cross-site scripting in Server (critical 9.8)
- [CVE-2026-3224](https://insights.sbomify.com/CVE-2026-3224/): Auth bypass in Server (critical 9.8)
- [CVE-2026-0610](https://insights.sbomify.com/CVE-2026-0610/): SQL injection in Server (critical 9.8)
- [CVE-2024-2921](https://insights.sbomify.com/CVE-2024-2921/): Missing authorization in Server (critical 9.8)
- [CVE-2025-6523](https://insights.sbomify.com/CVE-2025-6523/): Hardcoded credentials in Server (critical 9.5)
- [CVE-2021-23921](https://insights.sbomify.com/CVE-2021-23921/): Missing authorization in n/a (critical 9.1)
- [CVE-2025-11957](https://insights.sbomify.com/CVE-2025-11957/): Missing authorization in Server (critical 9.0)
- [CVE-2026-17568](https://insights.sbomify.com/CVE-2026-17568/): Privilege escalation in Server (high 8.8)
- [CVE-2025-13757](https://insights.sbomify.com/CVE-2025-13757/): SQL injection in Server (high 8.8)
- [CVE-2025-12485](https://insights.sbomify.com/CVE-2025-12485/): Privilege escalation in Server (high 8.8)
- [CVE-2025-11619](https://insights.sbomify.com/CVE-2025-11619/): Security feature bypass in Devolutions Server (high 8.8)

---
From sbomify Insights: https://insights.sbomify.com/products/devolutions/devolutions-server/