CVE-2026-84850
Improper certificate validation in the shared HTTP client used by synchronization and integration features in Devolutions Server 2026.2.16 and earlier allows a network-positione…
Published: 2026-09-15 · CVSS: 4.8 · CVSS 3.1
Improper certificate validation in the shared HTTP client used by synchronization and integration features in Devolutions Server 2026.2.16 and earlier allows a network-positioned attacker to intercept and tamper with outbound TLS connections via a spoofed or self-signed certificate.
Source: CVE Program · Revision 8b16575c39f1e1810c5e863010da073d2d3285e7