CVE-2025-13765
Medium · 4.3CVSS
4.3
EPSS
0.4%
Published
Nov 27, 2025
CISA due date
—
The record
Exposure of email service credentials to users without administrative rights in Devolutions Server.This issue affects Devolutions Server: before 2025.2.21, before 2025.3.9.
Affected packages
| Ecosystem | Package | Introduced | Fixed |
|---|