Known Vulnerabilities for Server by Devolutions
Listed below are 10 of the newest known vulnerabilities associated with "Server" by "Devolutions".
These CVEs are retrieved based on exact matches on listed software, hardware, and vendor information (CPE data) as well as a keyword search to ensure the newest vulnerabilities with no officially listed software information are still displayed.
Data on known vulnerable versions is also displayed based on information from known CPEs
Known Vulnerabilities
| CVE | Shortened Description | Severity | Publish Date | Last Modified |
|---|---|---|---|---|
| CVE-2026-81486 json | A vulnerability was detected in bsmi021 mcp-file-context-server 1.0.0. Affected by this issue is the function read_context of... | Not Provided | 2026-08-27 | 2026-08-27 |
| CVE-2026-81421 json | A security flaw has been discovered in ddfourtwo sentry-selfhosted-mcp 0.4.0. The affected element is an unknown function of ... | Not Provided | 2026-08-27 | 2026-08-26 |
| CVE-2026-81036 json | Stalwart Mail Server does not compare an OAuth redirect target against any registered destination in its default configuratio... | Not Provided | 2026-08-26 | 2026-08-26 |
| CVE-2026-81034 json | Netmaker disables certificate verification on the connection to the configured mail server. The sender in pro/email/smtp.go a... | Not Provided | 2026-08-26 | 2026-08-26 |
| CVE-2026-81030 json | Mage AI does not confine the paths accepted by its browser-items API to the project directory. BrowserItemResource in mage_ai... | Not Provided | 2026-08-26 | 2026-08-26 |
| CVE-2026-81029 json | OpenMetadata accepts a caller-supplied post-authentication redirect target and appends the issued token to it. SamlLoginServl... | Not Provided | 2026-08-26 | 2026-08-26 |
| CVE-2026-81028 json | ZLMediaKit confines the downloadFile API to a configured set of root directories with a prefix comparison that does not accou... | Not Provided | 2026-08-26 | 2026-08-26 |
| CVE-2026-81027 json | one-api gates one of its two channel-pinning paths and not the other. middleware/auth.go permits a request to name a specific... | Not Provided | 2026-08-26 | 2026-08-26 |
| CVE-2026-80428 json | ILIAS deserialises stored session data for an unauthenticated caller. The Shibboleth back-channel endpoint at components/ILIA... | Not Provided | 2026-08-26 | 2026-08-26 |
| CVE-2026-80426 json | FiftyOne renders a dataset field's description as markup. The sidebar field-information component at app/packages/core/src/co... | Not Provided | 2026-08-26 | 2026-08-26 |