CVE-2025-11958: Input Validation
Published Oct 22, 2025
·Updated
An improper input validation in the Security Dashboard ignored-tasks API of Devolutions Server 2025.2.15.0 and earlier allows an authenticated user to cause a denial of service to the Security Dashboard via a crafted request.
Affected Software
2 affected components
Devolutions Server<2025.2.15.0
Devolutions Devolutions Server<=2025.2.15.0
Event History
Oct 22, 2025
CVE Published
via MITRE·05:08 PM
Data Sourced
via MITRE·05:08 PM
DescriptionWeakness
Data Sourced
via NVD·05:15 PM
DescriptionSeverityWeaknessAffected Software
Frequently Asked Questions
1
What is the severity of CVE-2025-11958?
CVE-2025-11958 has been classified as a denial of service vulnerability.
2
How do I fix CVE-2025-11958?
To remediate CVE-2025-11958, update Devolutions Server to version 2025.2.15.1 or later.
3
Who is affected by CVE-2025-11958?
CVE-2025-11958 affects all authenticated users of Devolutions Server versions up to 2025.2.15.0.
4
What can an attacker achieve using CVE-2025-11958?
An attacker can exploit CVE-2025-11958 to cause a denial of service to the Security Dashboard.
5
Is authentication required to exploit CVE-2025-11958?
Yes, exploitation of CVE-2025-11958 requires the attacker to be an authenticated user.