CVE-2025-6523 – Devolutions Server Weak Emergency Code Brute Force

CVE ID : CVE-2025-6523

Published : July 22, 2025, 5:15 p.m. | 1 hour, 44 minutes ago

Description : Use of weak credentials in emergency authentication component in Devolutions Server allows an unauthenticated attacker to bypass authentication via brute forcing the short emergency codes generated by the server within a feasible timeframe.

This issue affects the following versions :

* Devolutions Server 2025.2.2.0 through 2025.2.3.0
*
Devolutions Server 2025.1.11.0 and earlier

Severity: 0.0 | NA

Visit the link for more details, such as CVSS details, affected products, timeline, and more…