CVE-2026-3204: Input Validation
Published Mar 3, 2026
·Updated
Improper input validation in the error message page in Devolutions Server 2025.3.16 and earlier allows remote attackers to spoof the displayed error message via a specially crafted URL.
Affected Software
2 affected components
Devolutions Server<2025.3.16
Devolutions Devolutions Server<=2025.3.16.0
Event History
Mar 3, 2026
CVE Published
via MITRE·09:24 PM
Data Sourced
via MITRE·09:24 PM
DescriptionWeakness
Data Sourced
via NVD·10:16 PM
DescriptionSeverityWeaknessAffected Software
Mar 5, 58156
Event
via FIRST·09:19 PM
Frequently Asked Questions
1
What is the severity of CVE-2026-3204?
CVE-2026-3204 has a medium severity rating due to improper input validation in Devolutions Server.
2
How do I fix CVE-2026-3204?
To fix CVE-2026-3204, upgrade to Devolutions Server version 2025.3.17 or later.
3
What type of vulnerability is CVE-2026-3204?
CVE-2026-3204 is classified as an improper input validation vulnerability.
4
Who is affected by CVE-2026-3204?
CVE-2026-3204 affects Devolutions Server versions 2025.3.16 and earlier.
5
What impact does CVE-2026-3204 have on users?
CVE-2026-3204 allows remote attackers to spoof error messages displayed to users.