Skip to content
CVE PROGRAM SOURCE RECORD8.3 High

CVE-2026-4396

Improper certificate validation in Devolutions Hub Reporting Service

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
DEVOLUTIONS

Description

Improper certificate validation in Devolutions Hub Reporting Service 2025.3.1.1 and earlier allows a network attacker to perform a man-in-the-middle attack via disabled TLS certificate verification.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Devolutions Hub Reporting Service

Default version status: unaffected

  • 0 to ≤ 2025.3.1.1affected

References