CVE-2025-13683

Medium · 6.5

CVSS

6.5

EPSS

0.4%

Published

Nov 28, 2025

CISA due date

—

The record

Exposure of credentials in unintended requests in Devolutions Server, Remote Desktop Manager on Windows.This issue affects Devolutions Server: through 2025.3.8.0; Remote Desktop Manager: through 2025.3.23.0.

Affected packages

Ecosystem	Package	Introduced	Fixed