CVE-2025-2528

3.6 lowEPSS 0.2%

Low (3.6) in devolutions remote desktop manager. EPSS 0.2% chance of exploitation in the next 30 days.

Improper authorization in application password policy in Devolutions Remote Desktop Manager on Windows allows an authenticated user to use a configuration different from the one mandated by the system administrators. This issue affects Remote Desktop Manager versions from 2025.1.24 through 2025.1.25, and all versions up to 2024.3.29.

Severity

CVSS 3.1

3.6 low

CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:L/I:L/A:N

EPSS: 0.2% chance of exploitation in the next 30 days; higher than 6% of CVEs (scores of 2026-10-31)
CWE: CWE-285
Published: 2025-03-26
Modified: 2026-06-17
Record from: the NVD, synced 2026-10-19

Affected

devolutions:remote_desktop_manager

References

https://devolutions.net/security/advisories/DEVO-2025-0005/

Check your stack JSON