high8.1
CVE-2026-4396
Improper certificate validation in Devolutions Hub Reporting Service 2025.3.1.1 and earlier allows a network attacker to perform a man-in-the-middle attack via…
Impact
Improper certificate validation in Devolutions Hub Reporting Service 2025.3.1.1 and earlier allows a network attacker to perform a man-in-the-middle attack via disabled TLS certificate verification.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Devolutions | Hub Reporting Service | before 2026.1.1.0 |