CVE-2021-42098

8.8 highEPSS 1.8%

High (8.8) in devolutions remote desktop manager. EPSS 1.8% chance of exploitation in the next 30 days.

An incomplete permission check on entries in Devolutions Remote Desktop Manager before 2021.2.16 allows attackers to bypass permissions via batch custom PowerShell.

Severity

CVSS 3.1

8.8 high

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

EPSS: 1.8% chance of exploitation in the next 30 days; higher than 77% of CVEs (scores of 2026-10-31)
CWE: CWE-276
Published: 2021-10-18
Modified: 2026-06-17
Record from: the NVD, synced 2026-10-19

Affected

devolutions:remote_desktop_manager

References

https://devolutions.net
https://devolutions.net/security/advisories/DEVO-2021-0006
https://devolutions.net
https://devolutions.net/security/advisories/DEVO-2021-0006

Check your stack JSON