{"description":"Trending threats, MITRE ATT\u0026CK coverage, and detection metadata. Fed continuously.","favicon":"https://feed.craftedsignal.io/favicon-32x32.png","feed_url":"https://feed.craftedsignal.io/cpes/cpe2.3adevolutionsserver/feed.json","home_page_url":"https://feed.craftedsignal.io/","icon":"https://feed.craftedsignal.io/apple-touch-icon.png","items":[{"_cs_actors":[],"_cs_cpes":["cpe:2.3:a:devolutions:server:*:*:*:*:*:*:*:*"],"_cs_cves":[{"cvss":8.8,"id":"CVE-2026-119636"}],"_cs_exploited":false,"_cs_has_poc":false,"_cs_poc_references":[],"_cs_products":["Devolutions Server"],"_cs_severities":["high"],"_cs_tags":["vulnerability","security-advisory"],"_cs_type":"advisory","_cs_vendors":["Devolutions"],"content_html":"\u003cp\u003eThe German Federal Office for Information Security (BSI) has disclosed the existence of multiple vulnerabilities affecting Devolutions Server. These flaws enable an attacker to perform information disclosure and bypass established security protections. At this time, specific technical details, CVE identifiers, and mitigation versions remain undisclosed in the BSI advisory.\u003c/p\u003e\n\u003ch2 id=\"recommendation\"\u003eRecommendation\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eInventory all Devolutions Server instances within the environment.\u003c/li\u003e\n\u003cli\u003eReview administrative logs for unauthorized access patterns or unexpected configuration changes.\u003c/li\u003e\n\u003cli\u003eMonitor vendor communication channels and the Devolutions security advisory page for the release of security patches.\u003c/li\u003e\n\u003cli\u003eApply security patches immediately upon availability to remediate the identified vulnerabilities.\u003c/li\u003e\n\u003c/ul\u003e\n","date_modified":"2026-11-06T21:29:39Z","date_published":"2026-11-04T10:14:42Z","id":"https://feed.craftedsignal.io/briefs/2026-11-devolutions-server-vulnerabilities/","summary":"The BSI has reported multiple vulnerabilities in Devolutions Server that may allow an attacker to perform unauthorized information disclosure and bypass security controls.","title":"Devolutions Server: Multiple security vulnerabilities","url":"https://feed.craftedsignal.io/briefs/2026-11-devolutions-server-vulnerabilities/"}],"language":"en","title":"CraftedSignal Threat Feed - Cpe:2.3:a:devolutions:server:*:*:*:*:*:*:*:*","version":"https://jsonfeed.org/version/1.1"}