Two records, one release, and a gap in between

CERT-BUND published WID-SEC-2026-3993 on 15 October 2026 with a medium risk rating and four CVE identifiers for Devolutions Server. NVD published its own records on 16 October 2026 with per-CVE descriptions, weakness classes and CVSS v3.1 scores. The fixed builds are 2026.3.10 and 2026.2.20.0.

Reading two databases at once is ordinary work for a vulnerability manager, and the differences in this case explain why a version check has to happen against the running system rather than against the advisory text.

What each source gives you

CERT-BUND supplies the product scope and the paired vulnerable and fixed references, naming releases below 2026.3.10 and below 2026.2.20.0.…