CVE-2026-3131 | Devolutions Server up to 2025.3.14 DVLS REST API Endpoint information disclosure (DEVO-2026-0004)

February 24, 2026 Yanac

A vulnerability identified as problematic has been detected in Devolutions Server up to 2025.3.14. Affected is an unknown function of the component DVLS REST API Endpoint. Performing a manipulation results in information disclosure.

This vulnerability was named CVE-2026-3131. The attack may be initiated remotely. There is no available exploit.

You should upgrade the affected component.VulDB Recent EntriesRead More