Loading story…
dCERT published advisories for Devolutions Server covering a file manipulation vulnerability and a broader set of multiple security flaws affecting the product. One advisory identified a weakness that could allow attackers to manipulate files, raising the risk of unauthorized modification of server-side data and potential impact on the integrity of managed resources.
A subsequent dCERT notice reported multiple vulnerabilities in Devolutions Server, indicating that the exposure extends beyond a single issue and may affect several components or attack paths within the platform. Organizations using Devolutions Server should review the vendor and dCERT advisories, determine affected versions, and prioritize patching or other mitigations to reduce the risk of compromise.
See real exploitation activity before you spend the cycle.
2 events from the most recent confirmed update back to the earliest known activity.
dCERT issued Advisory 2026-1633 covering multiple vulnerabilities affecting Devolutions Server, indicating additional or broader security issues were disclosed.
dCERT issued Advisory 2026-1479 for Devolutions Server, describing a vulnerability that allows manipulation of files.
Vulnerabilities, threat actors, malware, products, organizations, and breaches Mallory has linked to this story.
See real exploitation activity behind this advisory so you can triage it against everything else in the queue.
2 references tracked. Mallory keeps watching after this page renders.
Map indicators from this story to your assets and identify affected systems in minutes.
Every observed campaign, victim, and pivot linked to actors named in this story.
Malware, exploits, and IOCs connected to the activity described here.
YARA, Sigma, and Snort rules deployed to your SIEM as soon as they’re published.
Get matching new stories delivered to your team as they break — not the next morning.
Ask questions about this story and take action on the answers.
Other stories Mallory is tracking that overlap on entities, sources, or topic labels.
Germany's dCERT published two advisories affecting **Devolutions Server**, first warning of **multiple vulnerabilities** in the product and later issuing a separate notice for a flaw that **allows information disclosure**. The advisories indicate that organizations using Devolutions Server face more than one security issue, with the later bulletin highlighting the risk that sensitive data could be exposed. The sequence of notices suggests an expanding vulnerability picture for Devolutions Server, moving from a broader set of security weaknesses to a specifically identified disclosure issue. Security teams running the platform should review the vendor and dCERT advisories, determine affected versions, and prioritize remediation to reduce the risk of unauthorized access to exposed information and exploitation of any additional flaws covered by the earlier advisory.
Jun 29, 2026
dCERT issued advisory `2026-0776` for **Netwrix Password Secure**, warning of multiple vulnerabilities in the password management product. The notice indicates that several security flaws affect the software, creating potential risk for organizations that rely on it to store and manage privileged or sensitive credentials. A separate dCERT advisory, `2025-2738`, also reported multiple **Linux kernel** vulnerabilities that could allow **denial-of-service** conditions. Together, the advisories highlight concurrent exposure in both enterprise credential-management software and core operating system components, underscoring the need for defenders to review vendor guidance, assess affected deployments, and prioritize patching or other mitigations.
Jun 29, 2026
dCERT published two advisories covering **multiple vulnerabilities in `systemd`**, the widely deployed Linux init system and service manager. The notices identify separate batches of flaws affecting `systemd`, indicating an ongoing stream of security issues in a core component used across many Linux distributions and enterprise environments. Because `systemd` is deeply integrated into system startup, service control, logging, and host management, vulnerabilities in the software can have broad operational and security impact depending on the affected component and deployment. Organizations using Linux systems with `systemd` should review the dCERT advisories **2026-0707** and **2026-0815**, determine exposure across their fleets, and prioritize vendor patches or mitigations as they become available.
Jun 29, 2026