CVE-2026-8497: High severity Devolutions Devolutions Password Manager vulnerability
Improper certificate validation in the Devolutions Server connection handling in Devolutions Password Manager 2026.2.1.0 and earlier on Android, iOS, and macOS allows an adjacent-network attacker to intercept and modify sensitive information via a forged TLS certificate.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2026-8497?
The severity of CVE-2026-8497 is high, rated at 7.4 on the CVSS scale.
How do I fix CVE-2026-8497?
To fix CVE-2026-8497, update to the latest version of Devolutions Password Manager beyond version 2026.2.1.0.
What can an attacker do with CVE-2026-8497?
An attacker can intercept and modify sensitive information by exploiting improper certificate validation in Devolutions Password Manager.
Which platforms are affected by CVE-2026-8497?
CVE-2026-8497 affects Devolutions Password Manager on Android, iOS, and macOS.
What type of vulnerability is CVE-2026-8497?
CVE-2026-8497 is an improper certificate validation vulnerability in the connection handling of Devolutions Server.