Back to CVE List

CVE-2026-8497

Vulnerability Description

Improper certificate validation in the Devolutions Server connection handling in Devolutions Password Manager 2026.2.1.0 and earlier on Android, iOS, and macOS allows an adjacent-network attacker to intercept and modify sensitive information via a forged TLS certificate.

Vulnerability Details

Published Date
Last Modified
CWE ID
CWE-295
Source
NVD

External References

Discussion (0)

Add Comment

No comments yet. Be the first!