← Vulnerability feed

Vulnerability record · CVE-2026-7325 · published 22 May 2026

CVE-2026-7325: Devolutions server server-side request forgery (ssrf) vulnerability

Devolutions · Devolutions Server

Improper authorization in the Active Directory browsing feature in Devolutions Server allows a low-privileged authenticated user to obtain authentication material associated with a stored PAM provider service account via authentication relay to an attacker-controlled server. This issue affects : * Devolutions Server 2026.1.6.0 through 2026.1.16.0 * Devolutions Server 2025.3.20.0 and earlier

7.1 CVSS 3.1 High EPSS 0.28% · top 81.9% CWE-918 · Server-side request forgery (SSRF)
7.1CVSS 3.1 base score
0.28%EPSS exploitation probability, 30 days
NoNot in CISA KEV
1Affected product versions listed by NVD
1References
23 Jul 2026Last modified by NVD

Description

Improper authorization in the Active Directory browsing feature in Devolutions Server allows a low-privileged authenticated user to obtain authentication material associated with a stored PAM provider service account via authentication relay to an attacker-controlled server. This issue affects : * Devolutions Server 2026.1.6.0 through 2026.1.16.0 * Devolutions Server 2025.3.20.0 and earlier

CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:C/C:H/I:L/A:N

Affected products

1 vulnerable configurations from NVD's CPE data, grouped by vendor and product.

References

LinkTags
https://devolutions.net/security/advisories/DEVO-2026-0013/ Vendor Advisory

Track CVE-2026-7325 inside VULONE

Watch it alongside the ransomware crews, C2 infrastructure and forum chatter that reference it, query it through the API and pull it into your SIEM over TAXII.

Start free Open in platform

Related vulnerabilities

Same products first, then exploited flaws of the same weakness class.

9.8CVE-2026-3130Devolutions server vulnerabilityImproper Enforcement of Behavioral Controls in Devolutions Server 2025.3.15 and earlier allows an authenticated attacker with the delete permission t…EPSS 0.52%9.8CVE-2026-3204Devolutions server improper input validation vulnerabilityImproper input validation in the error message page in Devolutions Server 2025.3.16 and earlier allows remote attackers to spoof the displayed error …EPSS 0.62%9.8CVE-2026-3224Devolutions server improper authentication vulnerabilityAuthentication bypass in the Microsoft Entra ID (Azure AD) authentication mode in Devolutions Server 2025.3.15.0 and earlier allows an unauthenticate…EPSS 0.63%9.8CVE-2026-0610Devolutions server sql injection vulnerabilitySQL Injection vulnerability in remote-sessions in Devolutions Server.This issue affects Devolutions Server 2025.3.1 through 2025.3.12EPSS 0.30%9.8CVE-2024-2921Devolutions server missing authentication for critical function vulnerabilityImproper access control in PAM vault permissions in Devolutions Server 2024.1.10.0 and earlier allows an authenticated user with access to the PAM to…EPSS 0.79%9.5CVE-2025-6523Devolutions server vulnerabilityUse of weak credentials in emergency authentication component in Devolutions Server allows an unauthenticated attacker to bypass authentication via b…EPSS 0.42%9.1CVE-2021-23921Devolutions server vulnerabilityAn issue was discovered in Devolutions Server before 2020.3. There is broken access control on Password List entry elements.EPSS 1.00%9.0CVE-2025-11957Devolutions server insecure direct object reference vulnerabilityImproper authorization in the temporary access workflow of Devolutions Server 2025.2.12.0 and earlier allows an authenticated basic user to self-appr…EPSS 0.33%

Source: NIST National Vulnerability Database (record CVE-2026-7325), CISA KEV, FIRST EPSS (scores of 2026-09-27). This page is refreshed as NVD updates the record.