PT-2025-43381 · Unknown+1 · Httpdx Web Server+1

·

CVE-2025-11958

·

Published

2025-10-22

·

Updated

2025-11-28

CVSS v4.0

5.1

Medium

VectorAV:N/AC:L/AT:N/PR:H/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N
Name of the Vulnerable Software and Affected Versions Devolutions Server versions 2025.2.15.0 and earlier
Description An improper input validation exists in the Security Dashboard's ignored-tasks API. An authenticated user can send a crafted request to cause a denial of service to the Security Dashboard. The issue is related to the HTTP Web Server component.
Recommendations Versions prior to 2025.2.15.0 should be updated.

Fix

DoS

RCE

Found an issue in the description? Have something to add? Feel free to write us 👾

Weakness Enumeration

Related Identifiers

CVE-2025-11958

Affected Products

Devolutions Server
Httpdx Web Server