high7.4
CVE-2026-8497
Improper certificate validation in the Devolutions Server connection handling in Devolutions Password Manager 2026.2.1.0 and earlier on Android, iOS, and macOS…
Impact
Improper certificate validation in the Devolutions Server connection handling in Devolutions Password Manager 2026.2.1.0 and earlier on Android, iOS, and macOS allows an adjacent-network attacker to intercept and modify sensitive information via a forged TLS certificate.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Devolutions | Password Manager | before 2026.2.2.0 |