CVE-2025-13758
published 2025-11-27CVE-2025-13758: Exposure of credentials in unintended requests in Devolutions Server.This issue affects Server: through 2025.2.20, through 2025.3.8.
PriorityP415low3.5CVSS 3.1
AVNACLPRLUIRSUCLINAN
EPSS
0.26%
17.0th percentile
Exposure of credentials in unintended requests in Devolutions Server.This issue affects Server: through 2025.2.20, through 2025.3.8.
Affected
3 ranges
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| devolutions | devolutions_server | < 2025.2.21.0 | 2025.2.21.0 |
| devolutions | devolutions_server | >= 2025.3.2.0 < 2025.3.10.0 | 2025.3.10.0 |
| devolutions | server | <= 2025.2.20 | — |
Stop checking back — get the weekly exploitation signal.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
No detection rules found.
No public exploits indexed.
No writeups or analysis indexed.
2025-11-27
Published