1. Home
  2. CVE Database
  3. CVE-2026-3221
MEDIUM · 4.9

CVE-2026-3221

Sensitive user account information is not encrypted in the database in Devolutions Server 2025.3.14 and earlier, which allows an attacker with access to the database to obtain sensitive user inform...

Vulnerability Description

Sensitive user account information is not encrypted in the database in Devolutions Server 2025.3.14 and earlier, which allows an attacker with access to the database to obtain sensitive user information via direct database access.

CVSS Score

4.9

MEDIUM

CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
HIGH
User Interaction
NONE
Scope
UNCHANGED
Confidentiality
HIGH
Integrity
NONE
Availability
NONE

Affected Products

VendorProductVersions
DevolutionsDevolutions Server< 2025.3.15.0

Related Weaknesses (CWE)

CWE-312

References

FAQ

What is CVE-2026-3221?

CVE-2026-3221 is a vulnerability with a CVSS score of 4.9 (MEDIUM). Sensitive user account information is not encrypted in the database in Devolutions Server 2025.3.14 and earlier, which allows an attacker with access to the database to obtain sensitive user inform...

How severe is CVE-2026-3221?

CVE-2026-3221 has been rated MEDIUM with a CVSS base score of 4.9/10. Review the CVSS metrics above for detailed severity breakdown.

Is there a patch for CVE-2026-3221?

Check the references section above for vendor advisories and patch information. Affected products include: Devolutions Devolutions Server.