Skip to content
CVE PROGRAM SOURCE RECORD9.8 Critical

CVE-2026-3204

Improper

Description

Improper input validation in the error message page in Devolutions Server 2025.3.16 and earlier allows remote attackers to spoof the displayed error message via a specially crafted URL.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Devolutions Server

Default version status: unaffected

  • 0 to ≤ 2025.3.16affected

References