Loading story…
Germany's dCERT published two advisories affecting Devolutions Server, first warning of multiple vulnerabilities in the product and later issuing a separate notice for a flaw that allows information disclosure. The advisories indicate that organizations using Devolutions Server face more than one security issue, with the later bulletin highlighting the risk that sensitive data could be exposed.
The sequence of notices suggests an expanding vulnerability picture for Devolutions Server, moving from a broader set of security weaknesses to a specifically identified disclosure issue. Security teams running the platform should review the vendor and dCERT advisories, determine affected versions, and prioritize remediation to reduce the risk of unauthorized access to exposed information and exploitation of any additional flaws covered by the earlier advisory.
See real exploitation activity before you spend the cycle.
2 events from the most recent confirmed update back to the earliest known activity.
dCERT issued Advisory 2026-1281 for a Devolutions Server vulnerability that allows information disclosure. The reference indicates this advisory was published on April 29, 2026.
dCERT issued Advisory 2026-0936 covering multiple vulnerabilities affecting Devolutions Server. The reference indicates this was publicly published on April 2, 2026.
Vulnerabilities, threat actors, malware, products, organizations, and breaches Mallory has linked to this story.
See real exploitation activity behind this advisory so you can triage it against everything else in the queue.
2 references tracked. Mallory keeps watching after this page renders.
Map indicators from this story to your assets and identify affected systems in minutes.
Every observed campaign, victim, and pivot linked to actors named in this story.
Malware, exploits, and IOCs connected to the activity described here.
YARA, Sigma, and Snort rules deployed to your SIEM as soon as they’re published.
Get matching new stories delivered to your team as they break — not the next morning.
Ask questions about this story and take action on the answers.
Other stories Mallory is tracking that overlap on entities, sources, or topic labels.
dCERT published advisories for **Devolutions Server** covering a file manipulation vulnerability and a broader set of multiple security flaws affecting the product. One advisory identified a weakness that could allow attackers to manipulate files, raising the risk of unauthorized modification of server-side data and potential impact on the integrity of managed resources. A subsequent dCERT notice reported **multiple vulnerabilities** in Devolutions Server, indicating that the exposure extends beyond a single issue and may affect several components or attack paths within the platform. Organizations using Devolutions Server should review the vendor and dCERT advisories, determine affected versions, and prioritize patching or other mitigations to reduce the risk of compromise.
Jun 29, 2026
dCERT issued advisory `2026-0776` for **Netwrix Password Secure**, warning of multiple vulnerabilities in the password management product. The notice indicates that several security flaws affect the software, creating potential risk for organizations that rely on it to store and manage privileged or sensitive credentials. A separate dCERT advisory, `2025-2738`, also reported multiple **Linux kernel** vulnerabilities that could allow **denial-of-service** conditions. Together, the advisories highlight concurrent exposure in both enterprise credential-management software and core operating system components, underscoring the need for defenders to review vendor guidance, assess affected deployments, and prioritize patching or other mitigations.
Jun 29, 2026
German government CERT advisories disclosed multiple vulnerabilities affecting the **HCL BigFix Platform**, with separate notices identifying security issues in the enterprise endpoint management product. The advisories indicate that more than one flaw was reported across BigFix components, expanding the scope of risk for organizations that rely on the platform for device management, patching, and compliance operations. The notices provide limited public detail, but the repeated publication of advisories on **HCL BigFix** suggests ongoing remediation activity and a need for defenders to review vendor guidance, assess exposed BigFix infrastructure, and prioritize patch deployment. Organizations using BigFix should verify affected versions, apply available updates, and monitor administrative systems for signs of misuse while additional technical details remain sparse.
Jun 29, 2026