Volerion logoVolerion
Volerion logoVolerion

Devolutions Server and Remote Desktop Manager Tamperable Error Message Vulnerability

Vulnerability

A vulnerability exists in Devolutions Server and Remote Desktop Manager in versions through 2025.3.30. This issue stems from improper input validation on the error message page, which allows remote attackers to spoof error messages by using a specially crafted URL. The vulnerability could be exploited for phishing attempts by displaying misleading error messages.

Impact

Exploitation of this vulnerability could lead to spoofing of error messages, potentially facilitating phishing attacks.

Remediation

Users are advised to upgrade to Devolutions Server version 2025.3.16 or 2026.1. For Remote Desktop Manager, upgrade to version 2026.1.

Added: Mar 3, 2026, 10:48 PM
Updated: Mar 3, 2026, 10:48 PM

Vulnerability Rating

Custom Algorithm
spread
3.1
impact
0.2
exploitability
7.4
remediation
8.3
relevance
3.4
threat
0.0
urgency
2.9
incentive
4.2

Our algorithm analyzes dozens of metrics to generate these 8 key vulnerability categories, which are then combined to calculate the overall risk score.