[CVE-2026-8497] Improper certificate validation in the Devolutions Server connection handling in Devolutions Passwor…

Descripción técnica

Improper certificate validation in the Devolutions Server connection handling in Devolutions Password Manager 2026.2.1.0 and earlier on Android, iOS, and macOS allows an adjacent-network attacker to intercept and modify sensitive information via a forged TLS certificate.

Puntuación CVSS

Score: 7.4/10 — Severidad: HIGH — Estado NIST: Awaiting Analysis

CVSS:3.1/AV:A/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H

Debilidades (CWE)

CWE-295

Fuente oficial

Publicado en NIST NVD.